FBI Removes Accenture Contractor After Patch Failure Linked to ShinyHunters Breach
Summary
The FBI says a contractor failed to apply a security patch to a third-party platform, enabling a ShinyHunters breach that exposed personal details of thousands of bureau employees.
Key points
- The FBI says the breach resulted from a security failure in a platform managed by a third party.
- Reuters identified the platform as Oracle PeopleSoft; the FBI did not name the organization.
- ShinyHunters claimed it exploited the FBI job portal, and Mandiant reported the group used a URL-encoding trick to bypass a WAF rule related to CVE-2026-35273.
- The FBI removed the Accenture contractor it said failed to apply the security patch and said it took steps to mitigate further risk.
- The breach led to the theft of personal details of thousands of FBI employees.
- The FBI is investigating with partners; two ShinyHunters members have been arrested, and the agency said further arrests may follow.
Article Details
- Victim Organization
- Federal Bureau of Investigation (FBI)
- Incident Type
- Data breach following failure to apply a security patch to a third-party-managed platform; ShinyHunters said it exploited the platform to breach the FBI job portal.
- Data Types Exposed
- Personal details of FBI employees
- Affected Records
- Thousands of FBI employees; exact number not disclosed.
- Operational Impact
- The FBI said it removed the contractor and took steps to mitigate further risk and protect its workforce. The article does not report broader operational disruption.
- Claim Status
- confirmed
CVE
People
Threat Actors
Vendors
AccentureThe U.S. Federal Bureau of Investigation (FBI) has removed an Accenture contractor for their alleged role in a ShinyHunters-breach that led to the theft of personal details of thousands of bureau employees.OracleAlthough the name of the third-party organization was not disclosed by the FBI, Reuters reported that it's Oracle PeopleSoft, which the ShinyHunters group said it exploited to breach the FBI's job portal last month.
Products
Environment Management Hub (PSEMHUB)trick to get around a web application firewall (WAF) rule designed to block the vulnerable Environment Management Hub (PSEMHUB) endpoint.Oracle PeopleSoftAlthough the name of the third-party organization was not disclosed by the FBI, Reuters reported that it's Oracle PeopleSoft, which the ShinyHunters group said it exploited to breach the FBI's job portal last month.