FBI Removes Accenture Contractor Over ShinyHunters Data Breach
ID: 5634a4d8-4ebf-5ca0-9176-60f4be3d164d
STIX ID: report--5634a4d8-4ebf-5ca0-9176-60f4be3d164d
Feed Name: Security Boulevard
The FBI removed an Accenture contractor after ShinyHunters exploited an unpatched Oracle PeopleSoft flaw (CVE-2026-35273) to breach the agency’s job portal and steal thousands of employees’ personal records. Researchers found the group bypassed the site’s WAF by URL-encoding a character, demonstrating active exploitation across vulnerable PeopleSoft instances; arrests of suspected ShinyHunters members are ongoing. The incident underscores the danger of outsourced system management without verified patching and independent monitoring.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.