The company was targeted by fraudsters in a social engineering campaign in which they contacted employees by text or phone, pretended to be from human resources or IT, and tricked employees into giving up account access or their personal information, Workday said in a Friday (Aug. 15) blog post.
The data that was accessed included business contact information like names, email addresses and phone numbers, according to the post.
“There is no indication of access to customer tenants or the data within them,” the post said. “We acted quickly to cut the access and have added extra safeguards to protect against similar incidents in the future.”
Workday said in the post that the business contact information may be used by the fraudsters to “further their social engineering scams.”
The company will never contact anyone by phone to request any secure details and all its official communications come through its trusted support channels, the post said.
Advertisement: Scroll to Continue
PYMNTS reported in May that data breaches have shown that the weakest links in the digital chain are often not the companies themselves, but the networks of third-party service providers and infrastructure enablers surrounding them.
For example, German sportswear company Adidas announced in May that it suffered a data breach in which cybercriminals accessed customer data via a third-party customer service provider.
Verizon’s 2025 Data Breach Investigations Report found that the share of data breaches that involved third parties such as suppliers, vendors, hosting partners and outsourced IT support providers reached 30% during the year ended Oct. 31, up from 15% the previous year.
“While, to some extent, software vendors have long played a part in unintentionally increasing the attack surface for those who use their products and services, over the last two to three years, it has moved from the occasional (and typically minor to moderate) mishap to a much more widespread and insidious problem that can (and sometimes does) have a devastating effect on enterprises,” the report said.
