8X8 INC /DE/ 8-K

What Happened

• 8x8, Inc. reported that an unauthorized third‑party threat actor exploited Klue Labs, Inc.’s integration with the company’s Salesforce CRM and accessed/ exfiltrated information between June 11 and June 12, 2026; the company was informed on June 13, 2026.
• The actor removed access after 8x8 and Klue, with support from Salesforce, disabled the compromised integration. The company says the incident was isolated to information in 8x8’s Salesforce that was accessible via the Klue integration.
• Stolen data included competitively sensitive details about current, former and prospective customers — fragmented contract and opportunity information, sales team notes, and contact information (names, business addresses, phone numbers and email addresses). 8x8 is investigating and notifying relevant regulatory authorities.

Key Details

• Incident window: June 11–12, 2026; discovery and initial response: June 13, 2026.
• Third party involved: Klue Labs, Inc. integration with Salesforce; Salesforce supported remediation.
• Impact to operations: As of the filing, 8x8 reports no disruption to business or customer service and its systems remain operational.
• Response: Disabled the compromised integration, removed unauthorized access, continuing investigation and implementing additional security measures.

Why It Matters

• For investors, the filing confirms a material cybersecurity incident (Item 1.05) that involved customer‑related and sales information — this can carry reputational, regulatory and remediation cost risks even if no operational disruption has occurred to date.
• The company has not reported financial impact yet, but the situation is ongoing (investigation and regulator notifications) and could affect customer confidence or require future disclosure of costs or liabilities.