Reporters link the vendor breach to a Salesforce-focused vishing–OAuth campaign tied to ShinyHunters.