Report Alleges Mr. Raccoon Stole 13 Million Adobe Support Tickets via BPO
Summary
A report citing IntCyberDigest's X post alleges Mr. Raccoon accessed Adobe systems through an Indian BPO and exported 13 million support tickets, 15,000 employee records, HackerOne submissions and internal documents; Adobe confirmation is not provided.
Key points
- The article attributes the breach report to IntCyberDigest's X account; it provides no Adobe confirmation or independent verification.
- The alleged initial access involved a Remote Access Tool delivered to an employee at an Indian BPO through a deceptive email.
- The article says the attacker then phished the employee's manager to obtain elevated access to Adobe support systems.
- It alleges the support portal permitted bulk ticket exports without rate limiting or other export protections.
- The reported data includes 13 million support tickets, 15,000 employee records, HackerOne submissions and internal documents.
Article Details
- Victim Organization
- Adobe
- Incident Type
- Reported data breach through compromise of an Indian BPO partner, followed by phishing and bulk data exfiltration
- Disclosure Date
- 2026-04-02
- Data Types Exposed
- Customer personal data and historical support issues
- Employee records
- HackerOne submissions
- Internal documents, including corporate strategy and technical specifications
- Affected Records
- The report alleges 13 million support tickets and 15,000 employee records were exfiltrated. It also reports HackerOne submissions and internal documents, without specifying their number.
- Operational Impact
- The report describes data exfiltration from Adobe internal support systems after an Indian BPO employee workstation and elevated access were compromised. It does not report service disruption.
- Claim Status
- alleged