FBI Removes Accenture Contractor Over ShinyHunters Job Site Data Breach

The FBI removed a contractor after a third‑party‑managed Oracle PeopleSoft platform was breached—reportedly via the critical CVE-2026-35273 exploited by the ShinyHunters group—which exposed thousands of employees' sensitive PII and PHI (including addresses of intelligence operatives). Mandiant observed that attackers used URL encoding to bypass WAF protections and deployed web shells on vulnerable PeopleSoft servers worldwide; Oracle released an out-of-band alert and investigations and detainee cooperation are reported to be ongoing.