Недавний взлом ФБР был связан с компанией-подрядчиком Accenture

Reuters reports, citing two sources familiar with the investigation, that the FBI had an Accenture contractor pulled off its account after a security incident. The individual was reportedly responsible for a system that was left unpatched despite an available fix — understood to be Oracle PeopleSoft, which Accenture administers for the bureau. That gap allowed the ShinyHunters group to steal personal data belonging to thousands of FBI employees, according to the bureau's cyber division chief Brett Leatherman, who confirmed the breach stemmed from a third-party vendor failing to apply a patch meant to protect the platform.

Accenture declined to address questions about the employee or the missed update, saying only that it supports the FBI's mission. Separately, Mandiant researchers have warned that ShinyHunters is running an ongoing campaign against vulnerable Oracle PeopleSoft instances, likely exploiting CVE-2026-35273 on servers where a WAF was deployed but the patch itself was never installed.

The dispute traces back to late September 2026, when ShinyHunters claimed to have defaced the FBIJobs.gov careers portal and exfiltrated roughly 2-3 TB of data, allegedly including personal and medical records of current and former FBI staff and applicants. The group said the attack was retaliation over a law-enforcement report it considered defamatory, and notably never demanded ransom. Since then, Dutch police have arrested a suspect known as Umbreon, a second alleged member nicknamed Rey was reportedly detained in Jordan and is now cooperating with investigators, and ShinyHunters has told 404 Media it never intended to actually publish the stolen FBI data, calling the whole episode a publicity move.