Accenture Confirms Breach After Hacker Claims Source Code Theft
Summary
Accenture confirmed an attack after a hacker claimed to have stolen 35 GB of data, including source code and credentials. The company said it remediated the source and reported no operational impact; the access method and data impact remain unclear.
Key points
- Accenture confirmed an attack after a threat actor claimed on PwnForums to have compromised the company and stolen 35 GB of data.
- The actor claimed the data included source code, Azure access keys and tokens, configuration files, and RSA and SSH keys.
- The actor offered the allegedly stolen data for sale and posted a screenshot of a private Azure DevOps repository apparently hosted on an accenture[.]com domain.
- Accenture said it remediated the source of the incident and reported no impact to its operations or service delivery.
- Accenture did not provide further details; the access method and whether personal information was compromised remain unclear.
Article Details
- Victim Organization
- Accenture
- Victim Domain
- accenture.com
- Incident Type
- Accenture confirmed an attack and data breach. A hacker claimed to have compromised the company and stolen internal data, including source code and credentials; the claimed theft has not been independently confirmed in the article.
- Data Types Exposed
- Internal source code (claimed stolen)
- Azure access keys and tokens (claimed stolen)
- Configuration files (claimed stolen)
- RSA keys (claimed stolen)
- SSH keys (claimed stolen)
- Affected Data Size
- 35 gigabytes, according to the hacker's unverified claim.
- Operational Impact
- Accenture said it remediated the source of the incident and reported no impact to its operations or service delivery.
- Ransom Or Extortion
- The hacker allegedly attempted to sell the purportedly stolen data. No ransom demand was reported.
- Claim Status
- confirmed
People
Products
AzureAccording to the hacker, the information, including Azure access keys and tokens, configuration files, RSA and SSH keys, and source code, was exfiltrated from Accenture earlier this month.Azure DevOpsThe threat actor, who was trying to sell the allegedly stolen data, posted as proof-of-possession a screenshot depicting a private Azure DevOps repository apparently hosted on an accenture.com domain.