Nissan Says Oracle PeopleSoft Attack May Have Exposed Employee Data
Summary
Nissan says attackers targeting Oracle PeopleSoft may have stolen current and former employees’ data, including Social Security numbers and financial records. Its investigation is ongoing; ShinyHunters is believed to be behind the campaign.
Key points
- Nissan disclosed the breach in a notification filed with the California Attorney General.
- The attack targeted Oracle PeopleSoft, which Nissan uses to manage employee, payroll and tax records.
- Nissan’s investigation is ongoing, and the company believes attackers may have stolen data belonging to current and former employees in the US, Canada, Mexico and Brazil.
- Potentially affected information includes Social Security numbers, banking details, and financial and tax data.
- The campaign exploited zero-day vulnerability CVE-2026-35273.
- ShinyHunters is believed to be behind the campaign, but Nissan was not listed on the group’s website at the time of reporting.
Article Details
- Victim Organization
- Nissan Americas
- Incident Type
- Data breach involving a campaign that exploited the CVE-2026-35273 zero-day vulnerability in Oracle PeopleSoft
- Data Types Exposed
- Social Security numbers (SSNs)
- Banking information
- Financial data
- Tax data
- Ransom Or Extortion
- Nissan was not listed on the ShinyHunters website at the time of writing. The article does not report an extortion demand against Nissan.
- Claim Status
- alleged
CVE
Threat Actors
EverestThe ransomware group claimed in April to have stolen Nissan customer data; the article reports this as a claim, not a confirmed theft.ShinyHuntersBelieved to be behind the Oracle PeopleSoft campaign that targeted Nissan Americas; Nissan was not listed on the group’s website at the time of writing.
Vendors
Products
Countries
Brazilmay have stolen information belonging to current and former employees in the US, Canada, Mexico and Brazil, including SSNs, banking information, and financial and tax data.Canadabelieves the attackers may have stolen information belonging to current and former employees in the US, Canada, Mexico and Brazil, including SSNs, banking information, and financial and tax data.Mexicothe attackers may have stolen information belonging to current and former employees in the US, Canada, Mexico and Brazil, including SSNs, banking information, and financial and tax data.United Statescompany believes the attackers may have stolen information belonging to current and former employees in the US, Canada, Mexico and Brazil, including SSNs, banking information, and financial and tax data.