4 ms·

When I saw this headline, my first reaction was that a salesperson in an org could download all customer contact info and immediately go to a competitor and sta

by Pils 7y ago

When I saw this headline, my first reaction was that a salesperson in an org could download all customer contact info and immediately go to a competitor and start poaching customers extremely efficiently. How likely is this scenario? What sorts of recourse, legal or otherwise, would the org have? Non-competes are hard to enforce, and I don't know enough about trade secret laws to have a good opinion on this.

finaliteration 7y ago
> How likely is this scenario? It's difficult to say. Exporting data in bulk isn't totally straightforward for your average user, and I'm not sure how long total CRUD access was granted. That being said, given that full access was granted, it's not impossible to imagine someone creating a report and doing a dump of customer data. Though typically that may fall under NDA and not non-compete. NDAs are a little easier to enforce as far as I understand, but I'm not a lawyer.
- drtillberg 7y ago
  It's sort of like if you walked by a bank and saw a bundle of money unattended in the lobby rather than the vault. Technically maybe you could get outside with the bundle, but keeping out of trouble long enough to enjoy the big screen TV you try to buy? ... Don't bet in it.
  - thrav 7y ago
    Nah, it’s more akin to an employ coming in one day and seeing that the vault door is just open, and thinking they might poke around a bit / pocket some bundles of cash... Except they usually handle most of those bundles of cash day to day anyway.
thrav 7y ago
The way most companies operate, most of their Sales people could do this on any given day anyway. Salesforce can track those activities though. This issue did not open access to other companies’ data. Just all the data in their own Org.
tgsovlerkhgsel 7y ago
If I understand it correctly, it's much worse: A customer of Company A could download all internal data of Company A (e.g. all customer info) if Company A is using a Salesforce based support ticket system and the customer had an account in there. So if a sales person at Company B happens to be a Customer at Company A...

by Pils 7y ago

finaliteration 7y ago

> How likely is this scenario? It's difficult to say. Exporting data in bulk isn't totally straightforward for your average user, and I'm not sure how long total CRUD access was granted. That being said, given that full access was granted, it's not impossible to imagine someone creating a report and doing a dump of customer data. Though typically that may fall under NDA and not non-compete. NDAs are a little easier to enforce as far as I understand, but I'm not a lawyer.

drtillberg 7y ago
It's sort of like if you walked by a bank and saw a bundle of money unattended in the lobby rather than the vault. Technically maybe you could get outside with the bundle, but keeping out of trouble long enough to enjoy the big screen TV you try to buy? ... Don't bet in it.
- thrav 7y ago
  Nah, it’s more akin to an employ coming in one day and seeing that the vault door is just open, and thinking they might poke around a bit / pocket some bundles of cash... Except they usually handle most of those bundles of cash day to day anyway.

thrav 7y ago

The way most companies operate, most of their Sales people could do this on any given day anyway. Salesforce can track those activities though. This issue did not open access to other companies’ data. Just all the data in their own Org.

tgsovlerkhgsel 7y ago

If I understand it correctly, it's much worse: A customer of Company A could download all internal data of Company A (e.g. all customer info) if Company A is using a Salesforce based support ticket system and the customer had an account in there. So if a sales person at Company B happens to be a Customer at Company A...