Companies/Cloudinary/Incidents

Cloudinary: Third-Party Security Incident Impacting Salesforce Integration via Drift

Timeline of updates

1. resolved2025-09-03 13:06 UTC

   We have been informed of a security incident involving Drift, a third-party application previously integrated with our Salesforce environment as part of Cloudinary’s support processes. This incident is part of a broader issue affecting multiple organizations that use these services.

   Immediately upon learning of the situation, we disabled all connections between Cloudinary’s systems and Drift. We are actively working with Salesforce, Drift, and other relevant parties to support the ongoing investigation and to ensure the continued security of our data and systems.

   At this time, our review indicates that no data stored within Cloudinary’s products or core systems has been affected. The information involved appears limited to standard business contact details and certain support communications managed through Salesforce. Customers impacted by this incident have been notified directly with guidance and recommended next steps.

   As always, we encourage all customers to remain vigilant for any phishing or social engineering attempts that could result from incidents of this nature.

Impact, status and times are the vendor’s own, as last archived. View on stspg.io (opens in new tab).

Cloudinary profileRecent Cloudinary incidentsAll outages on September 3, 2025Cloudinary in September 2025MarkdownJSON