Prompt injection has been leveraged alongside an expired domain to steal Salesforce data in an attack named ForcedLeak.
ForcedLeak flaw in Salesforce Agentforce allows data exfiltration via indirect prompt injection; Salesforce issues patch.