Nissan Discloses Employee Data Breach Linked to Oracle Zero-Day

Nissan disclosed that attackers exploited a zero-day RCE in Oracle PeopleSoft (CVE-2026-35273) as part of a mass campaign linked to the ShinyHunters extortion group, impacting hundreds of organizations and exposing current and former employees' sensitive PII—including Social Security/national IDs, banking and tax records; Nissan has secured systems, restricted payroll access, is working with Oracle, and will notify affected employees and offer monitoring services.