Contact Form Prompt Injection: The Lead Was the Attack
A stranger typed instructions into a public Salesforce form, and the company’s own AI agent later leaked its account data. Salesforce has patched SalesBleed. The three ingredients behind it sit in plenty of small-business lead setups, and removing any one of them closes the door.
