Klue Data Breach Exposes OAuth Tokens, Prompts Class Action Investigation
A data breach at Klue, a Vancouver-based B2B software company specializing in AI-powered competitive enablement tools, has exposed sensitive OAuth tokens, potentially compromising access to connected services. The incident was discovered on June 22, 2026, prompting an ongoing investigation by the company.
Klue, founded in 2015, serves product marketing, competitive intelligence, and sales teams with platforms designed to track competitors and buyer insights. The breach’s full scope remains under review, but the exposure of OAuth tokens used to authenticate third-party integrations raises concerns about unauthorized access to linked accounts.
Shamis & Gentile P.A., a leading class action law firm, is investigating the breach and potential compensation for affected individuals. Those impacted may be eligible to join a lawsuit, though details on the number of users affected or specific data compromised have not yet been disclosed. Klue has pledged to provide updates as the investigation progresses.
Source: https://www.claimdepot.com/investigations/klue-data-breach-2026
Klue TPRM report: https://www.rankiteo.com/company/klue
"id": "klu1785882933",
"linkid": "klue",
"type": "Breach",
"date": "8/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'AI-powered competitive enablement tools',
'location': 'Vancouver, Canada',
'name': 'Klue',
'type': 'B2B Software Company'}],
'data_breach': {'sensitivity_of_data': 'High (potential unauthorized access '
'to linked accounts)',
'type_of_data_compromised': 'OAuth tokens'},
'date_detected': '2026-06-22',
'description': 'A data breach at Klue, a Vancouver-based B2B software company '
'specializing in AI-powered competitive enablement tools, has '
'exposed sensitive OAuth tokens, potentially compromising '
'access to connected services. The incident was discovered on '
'June 22, 2026, prompting an ongoing investigation by the '
'company.',
'impact': {'data_compromised': 'OAuth tokens',
'legal_liabilities': 'Potential class action lawsuit'},
'investigation_status': 'Ongoing',
'references': [{'source': 'Cyber Incident Description'}],
'regulatory_compliance': {'legal_actions': 'Class action investigation by '
'Shamis & Gentile P.A.'},
'response': {'communication_strategy': 'Pledged to provide updates as the '
'investigation progresses'},
'title': 'Klue Data Breach Exposes OAuth Tokens, Prompts Class Action '
'Investigation',
'type': 'Data Breach'}