AI Image
FBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters Breach
The Hacker News • • business
Key Points:
- The FBI has removed an Accenture contractor implicated in a ShinyHunters breach that exposed personal details of thousands of FBI employees due to a security patch failure on a third-party platform.
- The breach exploited a vulnerability in Oracle PeopleSoft, specifically targeting the FBI's job portal through a bypass of a web application firewall using a URL-encoding trick.
- The FBI is actively investigating the incident, has taken steps to mitigate further risks, and warned that additional arrests related to the ShinyHunters group are expected.
- Accenture affirmed its commitment to supporting the FBI's mission despite the contractor's removal, while both the FBI and Oracle have yet to comment further on the breach.
- This incident marks a significant development in the ongoing investigation into ShinyHunters, with two members already arrested and the FBI pursuing additional leads.
