Enterprise software company Workday recently suffered a data breach after threat actors targeted a third-party customer relationship management (CRM) platform. The threat actors then use the connection to download and steal the companies’ databases, with the group using the stolen data to extort victims via email. ShinyHunters has previously been linked to fellow cybercrime collective, Scattered Spider – the group linked to recent attacks on UK retailers. Summer of cyberattacksCommenting on the attacks, president of Ekco Security Pat Larkin said that the Workday breach shows that the recent wave of cyberattacks over the summer “aren’t easing off”. “We saw it with the M&S breach – the end user and your supply chain are often the weakest links, and that’s exactly what threat actors exploit.