A hacking group disguised as IT support has breached Salesforce systems of 20 companies in the US and Europe, using social engineering to obtain login credentials. They exfiltrated data and issued extortion demands, with no technical flaws in Salesforce itself identified.