INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

FBI Drops Accenture Contractor After Sensitive Data Breach

| 2026-10-06 09:27 CRITICAL HIGH DATA BREACH
JSON
Executive Summary
AI-generated
A sensitive data breach occurred at the FBI in June 2026, where a contractor from Accenture failed to implement a security patch on Oracle PeopleSoft software used by the agency's job site. This exposed personal details of thousands of bureau employees and was later exploited by ShinyHunters, a cybercrime group that claimed to have breached the FBI. The breach raised serious concerns over operational security for the FBI. As a result, Accenture lost an FBI contract after the incident, with the contractor removed due to their role in the damaging data breach.
Technical Mitigations AI-generated
• Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
ShinyHuntersShinyHunters
Target & Sectors
Global Scope healthhealth
Incident Timeline
‎May 2026
Threat actors ShinyHunters claimed responsibility for targeting the FBI after a May 2026 public advisory describing its tactics and warning victims against paying.
attribution FBI
The group says it targeted the FBI after a May 2026 public advisory describing its tactics and warning victims against paying.
threat_actor ShinyHunters
ShinyHunters disputes the FBI’s characterization of its activities and is reportedly demanding that the Bureau retract or correct the warning.
ShinyHunters has recently claimed responsibility for several major breaches and has been involved in a public dispute with the Clop cybercrime operation .
organisation Bureau
ShinyHunters disputes the FBI’s characterization of its activities and is reportedly demanding that the Bureau retract or correct the warning.
organisation SecurityAffairs
Follow me on Twitter:  @securityaffairs  and  Facebook  and  Mastodon Pierluigi Paganini ( SecurityAffairs  – hacking, Accenture)
‎September 22
Threat actors ShinyHunters claimed to have obtained sensitive data on a large number of current and former FBI personnel.
threat_actor ShinyHunters
The claim surfaced on September 22 and quickly drew attention after ShinyHunters said it obtained data on a large number of current and former FBI personnel.
attribution FBI
The claim surfaced on September 22 and quickly drew attention after ShinyHunters said it obtained data on a large number of current and former FBI personnel.
‎2026/09/29
A ShinyHunters suspect was picked up in Jordan and reportedly started cooperating with investigators, potentially aiding the FBI's understanding of a sensitive data breach.
source_region Jordan
Last week a key ShinyHunters suspect got picked up in Jordan and reportedly started cooperating with investigators, which might help the bureau understand just how bad the damage really is.
threat_actor ShinyHunters
Last week a key ShinyHunters suspect got picked up in Jordan and reportedly started cooperating with investigators, which might help the bureau understand just how bad the damage really is.
‎2026/10/06
ShinyHunters used a PeopleSoft zero-day vulnerability to breach the FBI's recruitment services, exposing sensitive personal data on thousands of employees and applicants.
threat_actor ShinyHunters
In June, Google warned about a ShinyHunters-linked campaign targeting PeopleSoft users.
ShinyHunters later said they used this same PeopleSoft vulnerability to access the FBI’s job site.
In September, the popular cybercrime group ShinyHunters claimed that it breached the U.S. Federal Bureau of Investigation (FBI) and stole sensitive information belonging to FBI employees and job applicants.
The agency has not confirmed that its internal systems were compromised or that ShinyHunters obtained the data it claims to possess.
ShinyHunters provided a possible technical explanation for the alleged intrusion.
There is also a clear motive behind the operation claimed by ShinyHunters.
Criminals in the same ecosystem as the hacking group, called ShinyHunters, have previously used hacked phone data to track and harass the FBI agents investigating them.
Although any potential damage will be less if ShinyHunters doesn’t publish the data publicly, the theft happening at all still presents much of those same national security risks, with the data providing granular insight into how the FBI operates.
organisation Google
In June, Google warned about a ShinyHunters-linked campaign targeting PeopleSoft users.
organisation PeopleSoft
In June, Google warned about a ShinyHunters-linked campaign targeting PeopleSoft users.
organisation The ‌Federal Bureau of Investigation
“The ‌Federal Bureau of Investigation removed an Accenture contractor on Monday over their role in a damaging data breach that exposed sensitive personal details of thousands of bureau employees, two sources familiar with the matter told Reuters.”
organisation Reuters
“The ‌Federal Bureau of Investigation removed an Accenture contractor on Monday over their role in a damaging data breach that exposed sensitive personal details of thousands of bureau employees, two sources familiar with the matter told Reuters.”
organisation Accenture
The FBI pulled an Accenture contractor off its account on Monday, and the reason is almost mundane compared to the damage it caused.
organisation Oracle PeopleSoft
Reuters’ sources identified the platform as Oracle PeopleSoft, the human resources software running the FBI’s job site, and named Accenture as the third party managing it.
organisation TB
They allegedly said that between 2 TB and 3 TB of data had been taken and that the FBI jobs infrastructure had been compromised.
data_breach 2 TB
They allegedly said that between 2 TB and 3 TB of data had been taken and that the FBI jobs infrastructure had been compromised.
data_breach 3 TB
They allegedly said that between 2 TB and 3 TB of data had been taken and that the FBI jobs infrastructure had been compromised.
organisation Oracle
Oracle hasn’t responded to requests for comment.
organisation Social Security
The group reportedly offered a sample of around 5,000 records as evidence and claimed that the stolen information could include names, addresses, phone numbers, Social Security numbers, assignments and, in some cases, family details.
data_breach 5,000 records
The group reportedly offered a sample of around 5,000 records as evidence and claimed that the stolen information could include names, addresses, phone numbers, Social Security numbers, assignments and, in some cases, family details.
organisation District 4 Labs
“Reuters was able to partially verify the authenticity of the information by running the details, including the Social Security numbers, ​against credit bureau records and previously breached data preserved by the dark-web intelligence firm District 4 Labs.” reads the report published by Reuters.
Tactical Metrics
Metrics
data_breach
5,000
Records
The group reportedly offered a sample of around 5,000 records as evidence and claimed that the stolen information could include names, addresses, phone numbers, Social Security numbers, assignments and, in some cases, family details.
Metrics
data_breach
2
Tb
They allegedly said that between 2 TB and 3 TB of data had been taken and that the FBI jobs infrastructure had been compromised.
Metrics
data_breach
3
Tb
They allegedly said that between 2 TB and 3 TB of data had been taken and that the FBI jobs infrastructure had been compromised.
Intelligence Sources
Data Breaches 2026-09-29
Security Affairs 2026-10-06