Millions of people whose personal data flowed through a single compromised Salesforce account now face a direct identity-theft risk, and most of them have done nothing to lock down their credit files.

Salesforce (CRM-1.07%) helped turn customer relationship management into a core business function and, in just 25 years, has grown into the world’s third-largest enterprise software company. Fueled ...