The US Federal Bureau of Investigation (FBI) has removed an Accenture contractor following a highly damaging data breach that compromised the personal and operational data of thousands of its employees.
According to the FBI’s Cyber Division, the unprecedented security failure was directly caused by the contractor’s negligence in implementing explicitly recommended security patches on a third-party managed platform, reportedly linked to an Oracle PeopleSoft vulnerability.
The notorious hacking group ShinyHunters exploited this unpatched flaw to infiltrate the system, successfully extracting granular counterintelligence job descriptions, medical and psychiatric records, and the home addresses of human intelligence operatives.
In response to the catastrophic leak, the FBI immediately severed ties with the contractor to mitigate further risks and launched a comprehensive internal review.
This high-profile breach underscores a critical cybersecurity reality: sophisticated threat actors continuously target third-party vendors and unpatched enterprise software as the path of least resistance. It highlights the urgent need for robust supply chain security, rigorous vendor auditing, and mandatory zero-delay patch management policies.
Read Reuters article for more information.
