FBI Removes Accenture Contractor Over Unpatched Oracle System Linked to Devastating Data Breach

The ShinyHunters data breach exposed the street addresses of human intelligence operatives, medical records, and granular counterintelligence job descriptions for thousands of bureau employees. The FBI confirmed the incident resulted directly from an unidentified Accenture contractor failing to implement an explicitly issued security patch for Oracle's PeopleSoft platform. Google and Oracle both issued critical security alerts urging organizations to apply fixes for the PeopleSoft weakness without delay in June. A key ShinyHunters suspect recently detained in Jordan is reportedly cooperating with authorities to help the bureau limit the operational damage. "To date, our review has determined that the incident occurred as the result of a security failure of a platform managed by a third-party organization — after a contractor failed to implement ​a security patch explicitly issued to secure the platform." — Brett Leatherman