The BPO Backdoor: How “Mr. Raccoon” Swiped 13 Million Adobe Support Tickets

Adobe was breached through a third‑party BPO compromise by an actor calling themselves Mr.Raccoon: a RAT was delivered to an employee, credentials and context were harvested, an upward phishing attack against a manager granted access to Adobe’s support systems, and the attacker exported roughly 13 million support tickets plus employee records, HackerOne submissions, and internal documents — enabled in part by the support portal allowing bulk exports.