Prompt injection has been leveraged alongside an expired domain to steal Salesforce data in an attack named ForcedLeak.