That's a pretty nonchalant way to say "they totally stole stuff before we knew what was going on or could stop them".
Most likely translation: it affected the Google SMB sales team's Salesforce instance
Which is to say, they took public _and_ private data and the private data is something we don't wish to publicly admit so probably not good.
Could totally see someone sending a message like "Hey, your TAM asked me to talk to you about $IMPORTANT_FEATURE_REQUEST, can you grant me read access in the account where you're developing $UPCOMING_SECRET_PROJECT so I can get some additional color?" It might even be enough to get someone on a conference call and pump them for MNPI about $UPCOMING_SECRET_PROJECT under the guise of ensuring that the feature request is helpful.
https://krebsonsecurity.com/2025/07/phishers-target-aviation...
> The instance was used to store contact information and related notes for small and medium businesses. Analysis revealed that data was retrieved by the threat actor during a small window of time before the access was cut off. The data retrieved by the threat actor was confined to basic and largely publicly available business information, such as business names and contact details.