The market has correctly observed that it wasn’t Salesforce who screwed up, it was their customers.

Okta came out and said they were not compromised, despite being targeted.[0]

I assume this is because they did some hardening on their unnamed “support case management system” last time they got popped.[1]

[0] https://cyberscoop.com/okta-zscaler-security-leaders-saleslo...

[1] https://sec.okta.com/articles/2023/11/unauthorized-access-ok...