The scope of Salesforce-related attacks has expanded, with more victims emerging after a breach at application vendor Klue. Attackers used stolen OAuth tokens from Klue to exfiltrate customer Salesforce data. This incident underscores the cascading impact of third-party breaches and the importance of securing OAuth tokens in enterprise environments.