Editor’s Note: The Salesloft Drift breach, which affected over 700 organizations between August 8–18, 2025, marks a defining moment in the evolution of SaaS-related supply chain attacks. With attackers exploiting OAuth token vulnerabilities in a widely used third-party integration, this incident surfaces urgent lessons for cybersecurity, information governance, and eDiscovery professionals. From the failure of
Alan N. Sutin is Chair of the firm's Technology, Media & Telecommunications Practice and Senior Chair of the Global Intellectual Property & Technology Practice. An