Klue Security Incident

We are aware of a security incident at Klue, a third-party competitive intelligence provider that customers have the ability to integrate with Gong.

Gong was recently notified by Klue that they experienced a security incident in which an unauthorized actor obtained access to their integration service.

To be clear: this was an incident that originated with third-party integrator Klue. It was not a direct breach of Gong’s own products or systems. Impacted customers were those who chose to connect Klue with Gong. Gong has not identified any direct impact to customer call recordings or transcripts.

Klue provided four (4) suspicious IP Addresses which we reviewed as part of our internal investigation into their incident. Based upon those IP Addresses and information available at this time, we can confirm that a subset of customers using the Klue integration may have had internal licensed user data accessed, though we can confirm no direct impact on call recordings or customer transcripts. Examples of data accessed included user names, user business titles and user emails.

Upon being alerted to this incident, Gong proactively took the following actions to contain this situation:

• revoked all active access associated with the Klue integration
• deactivated all tokens associated with the Klue integration
• applied blocking for four (4) potentially suspicious IP Addresses

All requests by Klue clients to the Gong API are blocked. Customers will not be able to connect Klue integrations until further notice. We have also proactively reached out to our customers to make them aware of this issue and offer our support in their own investigations.

The security, privacy, and trust of our customers is our top priority. As a precaution, we strongly recommend anyone using the Klue integration service stay alert for phishing emails, unexpected phone calls, or other social engineering attempts.

Our support and security teams are available to answer any questions you may have, please reach out to [email protected]