Cybersecurity incident — 2022-05-04 00:00:00
Affected organization: Heroku
Affected country: United States of America
Industry: Professional, Scientific, and Technical Services
Event type: Exploitive
Event subtype: Exploitation of Application Server
Motive: Financial
Actor: Undetermined
Actor type: Criminal
Actor country: Undetermined

Salesforce-owned Heroku performs a forced password reset on a subset of user accounts. The company admits that the stolen GitHub integration OAuth tokens from last month further led to the compromise of an internal customer database.