We’re writing to let you know about an event that affected a limited set of data in one of Google’s corporate Salesforce instances used to communicate with prospective Ads customers. Our records indicate basic business contact information and related notes were impacted by this event.

What happened

One of Google’s corporate Salesforce instances was affected by an event as described in this Google Threat Intelligence Group blog post. The threat actor had unauthorized access to this Salesforce instance for a short period of time but no access to Google systems.

The affected system contained basic business contact information such as business name, phone number and related notes so a Google sales agent could reach back out to them. 

There is no impact on Ads data stored in your Google Ads Account, Merchant Center, Google Analytics, other Ads products; or on payments information.

Google Security teams have assessed this Salesforce instance and put mitigations in place. 

What to do 

There are no actions for you to take at this time. We will continue to update this blog post as more information becomes available.

As a reminder, Google does not ask for your credentials or payment details over the phone.

We’re here to help

We apologize for any inconvenience this may have caused. If you have any questions or require assistance, please contact us using our support form.