Salesforce cuts off two connected apps over suspicious access-token use
Summary
Salesforce disabled connected apps and managed packages from Talent Rover, owned by Bullhorn, on November 10, 2026, and the GoFundMe Pro app on November 11, after spotting what it called "suspicious use of access tokens." Talent Rover was restored the same day after Bullhorn's remediation; GoFundMe Pro was still disabled on November 12. Salesforce said neither came from a platform vulnerability.
TopCloserR Perspective
The takeaway
Salesforce will switch off a third-party integration with no notice if it sees suspicious token use. If your team relies on connected apps, an outage can stop your workflow even when Salesforce itself is fine.
Who gets the most from this
- In the role
- You own the connected apps in your org, and any of them can be disabled as a precaution.
- Aspiring
- Salesforce admins and sales ops analysts. — Knowing every integration and who owns it is the kind of upkeep that earns trust.
- In the role
- If your agency runs on Talent Rover, you just saw how fast a key integration can go dark, even for a day.
- Aspiring
- Recruiting coordinators moving into desk roles. — Know which tools your desk depends on so an outage doesn't stall placements.
Put it to work
- List every connected app in your orgRevenue Operations Manager
For each one, note what it does, who owns it and what breaks if it's turned off.
- Plan a fallback for critical integrationsRevenue Operations Manager
Decide how reps keep working, even by hand, if an app is down for a day or longer.
- Check with your ATS vendor after any advisorySales Recruiter
Ask whether your data was affected and when service will be fully restored.
Recommendations
More Sales Technology news