On August 20, 2024, a security researcher published a blog post disclosing an issue affecting Slack AI.
When we became aware of the report, we launched an investigation into the described scenario where, under very limited and specific circumstances, a malicious actor with an existing account in the same Slack workspace could phish users for certain data. We deployed a patch to address the reported issue on August 20, 2024, and have no evidence at this time of unauthorized access to customer data.
Trust is our number one value and nothing is more important than the security of customer data. We appreciate the contributions of researchers who partner with us via our Research Program to help us meet evolving threats posed by malicious actors.