Council of Europe hacked in ShinyHunters' PeopleSoft heist

ShinyHunters claimed to have exploited a zero-day in Oracle PeopleSoft (CVE-2026-35273) to compromise over 300 vulnerable instances across more than 100 organizations, stealing roughly 297 GB of sensitive HR, payroll and personal records (about 429,000 files). Victims include the Council of Europe, the University of Nottingham and multiple education-sector organizations; Google reported activity consistent with exploitation between May 27 and June 9 and notified affected parties.