US Federal Insurance Regulator Confirms Data Breach Via Oracle Flaw

## Executive Summary The NAIC disclosed a security breach detected on June 11 in which a zero-day vulnerability in Oracle PeopleSoft—part of a broader campaign affecting multiple organizations—was exploited to access and publish portions of its environment, including credit rating agency data; NAIC contained the incident, engaged external responders and FBI, and has largely restored operations though some PeopleSoft services remain unavailable.