What is known with some certainty at this point is that Workday's CRM was breached. The company's statement that "no indication" of a deeper customer data breach was found is far from a guarantee — often, the full scope of hacks like this aren’t known until later.

The news of Google’s own Salesforce hack is also accompanied by a warning that there is now more clear evidence that ShinyHunters and Scattered Spider have formally joined forces, and that ShinyHunters is escalating to launching a leak site to put added pressure on its data breach victims.