Who can export your whole CRM?
Extortion groups keep phoning staff and walking out with SaaS exports. Limit and watch bulk exports.
The pattern hasn’t changed all year: a phone call to an employee or a support contractor, a login approved, and then a bulk export from Salesforce, a support desk or a data platform. A few days later comes an extortion email.
Most SaaS tools let far too many people export everything. Fixing that doesn’t stop the phishing, but it limits what one stolen account can take.
- Review who has export, report and API permissions in your CRM and support tools. Most users need none.
- Restrict which connected apps and API clients are allowed, and remove the unused ones.
- Limit logins by network or managed device where your plan allows it.
- Turn on event logging and alert on large exports, new API clients and logins from new countries.
- Ask your SaaS vendor what they can detect and block on their side.