If you’ve been in business technology for the last 18 months, you’ve seen the headlines. ShinyHunters. Salesforce. Millions of records. Another big name compromised.

But here’s what most articles miss: these breaches have almost nothing to do with Salesforce being insecure. They have everything to do with a threat group that figured out how to exploit the one thing every platform tries to protect against… human behavior.