---
title: "Cloud Security in NZ: Key Lessons from the Google-Salesforce Breach"
description: Learn from the Google–Salesforce breach and discover why NZ businesses need to reassess cloud security. Practical steps for data protection and compliance.
image: https://blog.nsp.co.nz/hubfs/Google%20salesforce%20breach_NSP.png
---
[](https://nsp.co.nz/)
- [Home](https://nsp.co.nz/)
- Solution
##### [Cybersecurity](https://nsp.co.nz/cybersecurity/)
- [Incident Response](https://nsp.co.nz/cybersecurity/incident-response/)
- [Penetration testing (pen tests)](https://nsp.co.nz/cybersecurity/penetration-testing/)
- [Security Assessments](https://nsp.co.nz/cybersecurity/cyber-security-assessments/)
- [Secure Email](https://nsp.co.nz/cybersecurity/secure-email-services/)
- [Security Awareness](https://nsp.co.nz/cybersecurity/cyber-security-awareness-training/)
- [Security Operations Centre](https://nsp.co.nz/cybersecurity/security-operations-centre/)
- [VCISO Strategy Services](https://nsp.co.nz/cybersecurity/vciso-strategy-services/)
- [Cyber Insurance Assessments](https://nsp.co.nz/cybersecurity/cyber-insurance-assessments/)
- [Vulnerability Management](https://nsp.co.nz/cybersecurity/vulnerability-management/)
- [Ransomware Protection & Recovery](https://nsp.co.nz/cybersecurity/ransomware-protection-and-recovery/)
- [Tabletop Exercise](https://nsp.co.nz/tabletop-exercise/)
##### [Modern Workplace](https://nsp.co.nz/modern-workplace/)
- [AI Governance & Compliance](https://nsp.co.nz/modern-workplace/ai-governance-compliance/)
- [Remote Workforce](https://nsp.co.nz/modern-workplace/remote-workforce/)
- [Microsoft Co-Pilot](https://nsp.co.nz/modern-workplace/microsoft-365-co-pilot/)
- [Consultation](https://nsp.co.nz/modern-workplace/consultation/)
- [Productivity & Innovation](https://nsp.co.nz/modern-workplace/productivity-and-innovation/)
- [Business Intelligence](https://nsp.co.nz/modern-workplace/business-intelligence/)
- [Security](https://nsp.co.nz/modern-workplace/security/)
##### [Cloud](https://nsp.co.nz/cloud/)
- [Managed Services](https://nsp.co.nz/cloud/managed-services/)
- [Migration](https://nsp.co.nz/cloud/migration/)
- [Storage](https://nsp.co.nz/cloud/storage/)
- [PBX/Voice](https://nsp.co.nz/cloud/pbx-voice/)
- [Security](https://nsp.co.nz/cloud/security/)
##### [Managed Services](https://nsp.co.nz/managed-services/)
- [Managed IT](https://nsp.co.nz/cloud/managed-it/)
- [Helpdesk](https://nsp.co.nz/managed-services/helpdesk/)
- [Business Intelligence](https://nsp.co.nz/managed-services/business-intelligence/)
- [Business Innovation](https://nsp.co.nz/managed-services/business-innovation/)
- [Managed Network](https://nsp.co.nz/managed-services/managed-network/)
##### [Network Performance](https://nsp.co.nz/network-performance/)
- [Firewall as a Service](https://nsp.co.nz/network-performance/firewall-as-a-service/)
- [Network Intelligence](https://nsp.co.nz/network-performance/network-intelligence/)
- [Network Roadmaps](https://nsp.co.nz/network-performance/network-roadmaps/)
##### [Backup](https://nsp.co.nz/backup/)
- [Data Backup](https://nsp.co.nz/backup/data-backup/)
- [Data Consultancy](https://nsp.co.nz/backup/data-consultancy/)
- [Data Retention Solutions](https://nsp.co.nz/backup/data-retention-solutions/)
- [Cloud Storage](https://nsp.co.nz/backup/cloud-storage/)
- [Ransomware Protection & Recovery](https://nsp.co.nz/backup/ransomware-protection-and-recovery/)
##### [Professional Services](https://nsp.co.nz/professional-services/)
- [Services](https://nsp.co.nz/professional-services/services/)
- [Consultancy](https://nsp.co.nz/professional-services/consultancy/)
- [Project Delivery](https://nsp.co.nz/professional-services/project-delivery/)
##### [Cybersecurity](https://nsp.co.nz/cybersecurity/)
- [Incident Response](https://nsp.co.nz/cybersecurity/incident-response/)
- [Penetration testing (pen tests)](https://nsp.co.nz/cybersecurity/penetration-testing/)
- [Security Assessments](https://nsp.co.nz/cybersecurity/cyber-security-assessments/)
- [Secure Email](https://nsp.co.nz/cybersecurity/secure-email-services/)
- [Security Awareness](https://nsp.co.nz/cybersecurity/cyber-security-awareness-training/)
- [Security Operations Centre](https://nsp.co.nz/cybersecurity/security-operations-centre/)
- [VCISO Strategy Services](https://nsp.co.nz/cybersecurity/vciso-strategy-services/)
- [Cyber Insurance Assessments](https://nsp.co.nz/cybersecurity/cyber-insurance-assessments/)
- [Vulnerability Management](https://nsp.co.nz/cybersecurity/vulnerability-management/)
- [Ransomware Protection & Recovery](https://nsp.co.nz/cybersecurity/ransomware-protection-and-recovery/)
- [Tabletop Exercise](https://nsp.co.nz/tabletop-exercise/)
##### [Modern Workplace](https://nsp.co.nz/modern-workplace/)
- [AI Governance & Compliance](https://nsp.co.nz/modern-workplace/ai-governance-compliance/)
- [Remote Workforce](https://nsp.co.nz/modern-workplace/remote-workforce/)
- [Microsoft Co-Pilot](https://nsp.co.nz/modern-workplace/microsoft-365-co-pilot/)
- [Consultation](https://nsp.co.nz/modern-workplace/consultation/)
- [Productivity & Innovation](https://nsp.co.nz/modern-workplace/productivity-and-innovation/)
- [Business Intelligence](https://nsp.co.nz/modern-workplace/business-intelligence/)
- [Security](https://nsp.co.nz/modern-workplace/security/)
##### [Cloud](https://nsp.co.nz/cloud/)
- [Managed Services](https://nsp.co.nz/cloud/managed-services/)
- [Migration](https://nsp.co.nz/cloud/migration/)
- [Storage](https://nsp.co.nz/cloud/storage/)
- [PBX/Voice](https://nsp.co.nz/cloud/pbx-voice/)
- [Security](https://nsp.co.nz/cloud/security/)
##### [Managed Services](https://nsp.co.nz/managed-services/)
- [Managed IT](https://nsp.co.nz/cloud/managed-it/)
- [Helpdesk](https://nsp.co.nz/managed-services/helpdesk/)
- [Business Intelligence](https://nsp.co.nz/managed-services/business-intelligence/)
- [Business Innovation](https://nsp.co.nz/managed-services/business-innovation/)
- [Managed Network](https://nsp.co.nz/managed-services/managed-network/)
##### [Network Performance](https://nsp.co.nz/network-performance/)
- [Firewall as a Service](https://nsp.co.nz/network-performance/firewall-as-a-service/)
- [Network Intelligence](https://nsp.co.nz/network-performance/network-intelligence/)
- [Network Roadmaps](https://nsp.co.nz/network-performance/network-roadmaps/)
##### [Backup](https://nsp.co.nz/backup/)
- [Data Backup](https://nsp.co.nz/backup/data-backup/)
- [Data Consultancy](https://nsp.co.nz/backup/data-consultancy/)
- [Data Retention Solutions](https://nsp.co.nz/backup/data-retention-solutions/)
- [Cloud Storage](https://nsp.co.nz/backup/cloud-storage/)
- [Ransomware Protection & Recovery](https://nsp.co.nz/backup/ransomware-protection-and-recovery/)
##### [Professional Services](https://nsp.co.nz/professional-services/)
- [Services](https://nsp.co.nz/professional-services/services/)
- [Consultancy](https://nsp.co.nz/professional-services/consultancy/)
- [Project Delivery](https://nsp.co.nz/professional-services/project-delivery/)
- [About us](https://nsp.co.nz/about-us/)
- Resources
- [Blog](https://blog.nsp.co.nz/)
- [Webinar](https://nsp.co.nz/webinar/)
- [Blog](https://blog.nsp.co.nz/)
- [Webinar](https://nsp.co.nz/webinar/)
- [Contact us](https://nsp.co.nz/contact-us/)
[0508 010 101](tel:0508%20010%20101)[hello@nsp.co.nz](mailto:hello@nsp.co.nz)
- Home
- Blogs
- Cloud Security in NZ: Key Lessons from the...
### Cloud Security in NZ: Key Lessons from the Google-Salesforce Breach
Dayna-Jean Broeders
02 September 2025
6 min
Read
# **Lessons from the Google-Salesforce Breach: Why NZ Businesses Must Reassess Cloud Security**
In August 2025, a [significant data breach](https://www.newsweek.com/hackers-issue-ultimatum-data-breach-2122489) compromised over 2.5 million records from [Google's Salesforce CRM instance.](https://www.msn.com/en-us/money/other/google-issues-worldwide-gmail-data-breach-warning/ar-AA1LzXKQ) This breach, attributed to the ShinyHunters hacking group, exploited a [voice phishing (vishing) attack](https://www.newsweek.com/fbi-warns-ai-scam-impersonating-top-us-officials-2073122) to gain unauthorized access to sensitive business contact information. While no payment details were affected, the breach underscores the vulnerabilities inherent in cloud platforms and the critical need for robust security measures.
For New Zealand businesses, this incident serves as a stark reminder that reliance on cloud providers does not absolve them of responsibility for securing their data. As cloud adoption accelerates, so does the sophistication of cyber threats. It's imperative for businesses to reassess their [cloud security strategies](https://nsp.co.nz/cloud/migration/) to safeguard sensitive information and maintain trust with customers.
## **The State of Cloud Adoption in New Zealand**
New Zealand's public cloud spending is projected to nearly double from NZ$5 billion in 2024 to NZ$9.6 billion by 2028, reflecting an 18% compound annual growth rate. This expansion is expected to generate over NZ$22 billion in new revenue over the next four years, with public cloud contributing an estimated NZ$24.3 billion to the economy in 2024 alone.
Despite this growth, a significant gap exists between the recognition of cloud's strategic importance and the readiness of businesses to implement it effectively. A survey revealed that while 70% of New Zealand businesses identify cloud computing as essential for future growth, only 34% possess the infrastructure, governance, and technical maturity needed to fully leverage cloud technology.
## **Emerging Cybersecurity Trends in New Zealand**
The cyber threats in New Zealand are evolving, with an increase in sophisticated attacks targeting [cloud platforms](https://nsp.co.nz/cloud/). The National Cyber Security Centre's 2023/2024 Cyber Threat Report highlights the growing complexity of cyber threats from both criminal and state-sponsored actors.
Notably, the rise of [ransomware](https://nsp.co.nz/cybersecurity/ransomware-protection-and-recovery/) incidents and the targeting of cloud services have become prominent concerns. Emerging threat groups are employing innovative tactics to exploit vulnerabilities in cloud environments, emphasizing the need for businesses to adopt proactive security measures.
## **Key Lessons from the Google-Salesforce Breach**
**1. Third-Party Integrations Are a Vulnerability**
The breach exploited a third-party integration within Salesforce, highlighting the risks associated with interconnected systems. Businesses must regularly audit and manage third-party applications to ensure they do not introduce security gaps.
**2. Human Error Remains a Significant Risk**
The vishing attack relied on social engineering to deceive employees into granting access. This underscores the importance of continuous [employee training and awareness programs](https://nsp.co.nz/cybersecurity/cyber-security-awareness-training/) to mitigate human error.
**3. Shared Responsibility Model**
Cloud providers offer robust security features, but businesses are responsible for configuring and managing these tools effectively. It's crucial to understand the shared responsibility model and implement appropriate security controls.
**4. Incident Response Preparedness Is Essential**
The breach's rapid detection and response were critical in mitigating its impact. Businesses should develop and regularly test [incident response](https://nsp.co.nz/cybersecurity/incident-response/) plans to ensure swift action in the event of a security incident.
## **Strengthening Cloud Security: Practical Steps for NZ Businesses**
To enhance cloud security and protect against potential breaches, New Zealand businesses should consider the following measures:
- **Implement Multi-Factor Authentication (MFA):** Enforce MFA across all user accounts to add an extra layer of security.
- **Conduct Regular Security Audits:** Regularly review and update security configurations, permissions, and access controls.
- **Educate Employees:** Provide ongoing training to employees on recognizing phishing attempts and adhering to security best practices.
- **Utilize Managed Detection and Response (MDR) Services:** Employ [MDR services](https://go.nsp.co.nz/managed-detection-and-response-for-nz-smes) to monitor cloud environments for suspicious activities and respond to potential threats.
- **Develop an Incident Response Plan:** Establish and regularly test an [incident response plan](https://nsp.co.nz/tabletop-exercise/) to ensure preparedness in the event of a security breach.
## **NSP's Cloud Security Solutions**
At NSP, we understand the unique cybersecurity challenges faced by New Zealand businesses. Our comprehensive cloud security services include:
- **[Managed Detection and Response (MDR)](https://go.nsp.co.nz/managed-detection-and-response-for-nz-smes):** Continuous monitoring and rapid response to threats within your cloud environment.
- **[Virtual Chief Information Security Officer (vCISO)](https://nsp.co.nz/cybersecurity/vciso-strategy-services/):** Strategic guidance and leadership to enhance your organization's security posture.
- **[Secure Cloud Migration](https://nsp.co.nz/cloud/migration/):** Safe and efficient migration of your business operations to the cloud with minimal disruption.
By partnering with NSP, businesses can bolster their [cloud security](https://nsp.co.nz/cloud/migration/) and navigate the complexities of the digital environments with confidence.
## **Frequently Asked Questions**
**1. How can I determine if my cloud environment is secure?**
Conduct a comprehensive security audit to assess configurations, access controls, and third-party integrations. Engaging with a [cybersecurity](https://nsp.co.nz/cybersecurity/) professional can provide valuable insights.
**2. What are the signs that my business is vulnerable to a cloud security breach?**
Indicators include outdated software, lack of MFA, excessive user permissions, and unmonitored third-party applications. Regular [security assessments](https://nsp.co.nz/cybersecurity/cyber-security-assessments/) can help identify these vulnerabilities.
**3. How often should I update my cloud security protocols?**
Security protocols should be reviewed and updated regularly, at least quarterly, or whenever there are significant changes to your [cloud](https://nsp.co.nz/cloud/) environment or threat environment.
**4. What role does employee training play in cloud security?**
Employee training is crucial in preventing [social engineering attacks](https://www.ibm.com/think/topics/social-engineering) and ensuring adherence to security best practices. [Regular training sessions](https://nsp.co.nz/cybersecurity/cyber-security-awareness-training/) can significantly reduce human error-related incidents.
**5. Can NSP assist with cloud security compliance requirements?**
Yes, NSP provides services to help businesses comply with relevant regulations and standards, ensuring that your cloud environment meets necessary [security](https://nsp.co.nz/cybersecurity/) and compliance requirements.
The Google-Salesforce breach proves one thing: **if it can happen to them, it can happen to anyone**. Cloud is the future of NZ business, but only if it’s secured properly.
## **Don’t wait until you’re the headline.**
Contact NSP to discuss a **secure cloud migration strategy** and protect your business before attackers find the gaps.
Book a free strategy session
#### CATEGORY
- [Cybersecurity (94)](https://blog.nsp.co.nz/tag/cybersecurity)
- [Digital transformation (37)](https://blog.nsp.co.nz/tag/digital-transformation)
- [Managed services (33)](https://blog.nsp.co.nz/tag/managed-services)
- [Awareness and education (23)](https://blog.nsp.co.nz/tag/awareness-and-education)
- [Cloud (23)](https://blog.nsp.co.nz/tag/cloud)
- [AI (20)](https://blog.nsp.co.nz/tag/ai)
- [Breach (17)](https://blog.nsp.co.nz/tag/breach)
- [IT Risk (17)](https://blog.nsp.co.nz/tag/it-risk)
- [modern workplace (12)](https://blog.nsp.co.nz/tag/modern-workplace)
- [Collaboration (11)](https://blog.nsp.co.nz/tag/collaboration)
- [Cyber Smart Week (11)](https://blog.nsp.co.nz/tag/cyber-smart-week)
- [Business strategy (9)](https://blog.nsp.co.nz/tag/business-strategy)
- [Culture (9)](https://blog.nsp.co.nz/tag/culture)
- [microsoft (9)](https://blog.nsp.co.nz/tag/microsoft)
- [Backup (8)](https://blog.nsp.co.nz/tag/backup)
- [Remote Workers (8)](https://blog.nsp.co.nz/tag/remote-workers)
- [copilot (7)](https://blog.nsp.co.nz/tag/copilot)
- [Cyber Insurance (6)](https://blog.nsp.co.nz/tag/cyber-insurance)
- [Future of work (6)](https://blog.nsp.co.nz/tag/future-of-work)
- [Managed Detection & Response (MDR) (6)](https://blog.nsp.co.nz/tag/managed-detection-response-mdr)
- [network performance (6)](https://blog.nsp.co.nz/tag/network-performance)
- [Vulnerability Assessment (5)](https://blog.nsp.co.nz/tag/vulnerability-assessment)
- [Microsoft Teams (4)](https://blog.nsp.co.nz/tag/microsoft-teams)
- [vCISO (4)](https://blog.nsp.co.nz/tag/vciso)
- [0365 (3)](https://blog.nsp.co.nz/tag/0365)
- [Governance (3)](https://blog.nsp.co.nz/tag/governance)
- [IT budget (3)](https://blog.nsp.co.nz/tag/it-budget)
- [Legal Industry (3)](https://blog.nsp.co.nz/tag/legal-industry)
- [Best Practice (2)](https://blog.nsp.co.nz/tag/best-practice)
- [Construction Industry (2)](https://blog.nsp.co.nz/tag/construction-industry)
- [Penetration Testing (2)](https://blog.nsp.co.nz/tag/penetration-testing)
- [Tabletop Exercise (2)](https://blog.nsp.co.nz/tag/tabletop-exercise)
- [health IT consultant (2)](https://blog.nsp.co.nz/tag/health-it-consultant)
- [Healthcare (1)](https://blog.nsp.co.nz/tag/healthcare)
see all
#### RECENT POST
[.webp)](https://blog.nsp.co.nz/nz-cyber-breaches-september-2026-what-to-do-next)
[3 NZ Cyber Breaches in 1 Week: What Every NZ Business Should Do | NSP](https://blog.nsp.co.nz/nz-cyber-breaches-september-2026-what-to-do-next)
14 Sept 2026
[](https://blog.nsp.co.nz/microsoft-365-security-drift-nz-business)
[Microsoft 365 Security Drift: What NZ Businesses Should Know | NS](https://blog.nsp.co.nz/microsoft-365-security-drift-nz-business)
13 Sept 2026
[](https://blog.nsp.co.nz/copilot-data-access-permissions-nz-business)
[What Can Your Staff See? The AI Question for NZ Businesses | NSP](https://blog.nsp.co.nz/copilot-data-access-permissions-nz-business)
08 Sept 2026
[](https://blog.nsp.co.nz/nz-businesses-adopting-ai-before-ready)
[Why NZ Businesses Are Adopting AI Before They're Ready | NSP](https://blog.nsp.co.nz/nz-businesses-adopting-ai-before-ready)
16 Aug 2026
### Let’s stay in touch!
Enter your details below to stay up-to-date with the latest IT solutions and security measures.
[](https://nsp.co.nz/)
A trusted technology partner for NZ SMEs. Building secure, scalable technology solutions for more than 20 years
##### Useful Links
- [About us](https://nsp.co.nz/about-us/)
- [Procurement](https://savvi.net.nz/)
- [Cybersecurity](https://nsp.co.nz/cybersecurity/)
- [Managed Services](https://nsp.co.nz/managed-services/)
- [Cloud](https://nsp.co.nz/cloud/)
- [Contact us](https://nsp.co.nz/contact-us/)
##### Contact
Unit 1, 13 Farnham Street Parnell, Auckland 1052, NZ
- [0508 010 101](tele:0508%20010%20101)
- [info@nsp.co.nz](mailto:info@nsp.co.nz)
-
-
-
Copyright © 2026 NSP - All rights reserved
- [Terms & Conditions](https://blog.nsp.co.nz/hubfs/NSP%20Terms%20and%20conditions/NSP%20Terms%20%26%20Conditions%202021.pdf)
- [Privacy Policy](https://nsp.co.nz/privacy-policy/)
```json
{
"@context" : "https://schema.org",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "Dayna-Jean Broeders",
"url" : "https://blog.nsp.co.nz/author/dayna-jean-broeders"
},
"dateModified" : "2026-05-08T03:39:58.738Z",
"datePublished" : "2025-09-02T03:02:31.000Z",
"headline" : "Cloud Security in NZ: Key Lessons from the Google-Salesforce Breach",
"image" : [ "https://blog.nsp.co.nz/hubfs/Google%20salesforce%20breach_NSP.png" ],
"mainEntityOfPage" : {
"@id" : "https://blog.nsp.co.nz/key-lessons-from-the-google-salesforce-breach",
"@type" : "WebPage"
},
"publisher" : {
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://blog.nsp.co.nz/hubfs/NSP_Logo_Primary%20logo_CMYK_1.png"
},
"name" : "Network Service Providers Ltd"
}
}
```