🐴 The trojan integration

Insufficient logging & monitoring

Your customers love the new 'SlackFlow' integration you launched last month - usage is through the roof.

85% of your customers have connected it to sync project updates between your platform and their Slack workspaces.

Then you get a panicked call from Jennifer at TechStart Inc: "Why is our confidential acquisition project showing up in our competitor's sales pitch?"

You investigate and discover 'SlackFlow' isn't a legitimate company - it's a sophisticated data harvesting operation run by your biggest competitor.

Technical Issue: You didn't verify the third-party integration company or monitor what data they were accessing. 'SlackFlow' requested broad API permissions and you had no logging to track what customer data was being extracted.

What's your immediate first move?

Immediately disable the SlackFlow integration

Cut off their access and stop any further data theft

Investigate the scope without alerting customers

Figure out how bad it is before taking action

Confront SlackFlow and demand explanations

Try to understand what they've done with the data

Immediately notify all affected customers

Be transparent about the breach and help them protect themselves

← Select different scenario