{"id":3393,"date":"2026-10-06T08:59:50","date_gmt":"2026-10-06T08:59:50","guid":{"rendered":"https:\/\/thedigitalfortress.us\/?p=3393"},"modified":"2026-10-06T08:59:50","modified_gmt":"2026-10-06T08:59:50","slug":"fbi-removes-accenture-contractor-after-patch-failure-led-to-shinyhunters-breach","status":"publish","type":"post","link":"https:\/\/thedigitalfortress.us\/?p=3393","title":{"rendered":"FBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters Breach"},"content":{"rendered":"<div>\n<p><span class=\"p-author\"><i class=\"icon-font icon-user\">\ue804<\/i><span class=\"author\">Ravie Lakshmanan<\/span><i class=\"icon-font icon-calendar\">\ue802<\/i><span class=\"author\">Oct 06, 2026<\/span><\/span><\/p>\n<\/div>\n<div id=\"articlebody\">\n<div class=\"separator\" style=\"clear: both;\"><a href=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEiVB4YaCEMdO6UU6llRwDBMNe82j6s6myWlT8Y92f808ntjdWsPEFgXBpFhGxoAZdkFq5DVA4_XaQpbwvJFjpEUxrRjjRVITahCSGSxmi3qkad2fk-kZ1oXnoxKaFHNs2aRQl7LQ6r2Ljt57IZNaFvwejEQ20us7fMVpNYptJxoVCyol8BlVaXyLkkaeHQI\/s1700-nu-rw-lo-l85-e365\/fbi-breach.jpg\" style=\"display: block;  text-align: center; clear: left; float: left;\"><\/a><\/div>\n<p>The U.S. Federal Bureau of Investigation (FBI) has removed an Accenture contractor for their alleged role in a ShinyHunters-breach that led to the theft of personal details of thousands of bureau employees.<\/p>\n<p>That&#8217;s according to a <a href=\"https:\/\/www.reuters.com\/technology\/accenture-contractor-removed-fbi-following-damaging-data-breach-sources-say-2026-10-06\/\" target=\"_blank\">report<\/a> from Reuters, citing two sources familiar with the matter.<\/p>\n<p>\u00abTo date, our review has determined that the incident occurred as the result of a security failure \u200bof a platform managed by a third-party organization \u2014 after a contractor failed to implement a security patch explicitly issued to secure the \u200bplatform,\u00bb Brett Leatherman, assistant director of the FBI&#8217;s cyber division, was quoted as saying to the FBI.<\/p>\n<p>\u00abAs such, the FBI has removed the contractor and taken all necessary steps to both mitigate any further risk and protect our workforce.\u00bb<\/p>\n<p>Although the name of the third-party organization was not disclosed by the FBI, Reuters reported that it&#8217;s Oracle PeopleSoft, which the ShinyHunters group said it exploited to breach the FBI&#8217;s job portal last month.<\/p>\n<div class=\"dog_two clear\">\n<div class=\"cf\"><a href=\"https:\/\/thehackernews.uk\/growth-ai-control-d\" rel=\"nofollow noopener sponsored\" target=\"_blank\"><img loading=\"lazy\" decoding=\"async\" class=\"lazyload\" alt=\"Cybersecurity\" src=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEjVYuoalvwUlwvLZFDideJ8jW4rz-IodX0Lwi7uyP7Ab0wiDeu_BqVhPDdejQQ65MC3p9Xc4MApnHz56NJ5SDc1HMg0DvozkkGYv9TGtDLCh26v1yD5-GyzQxnA5-6A6B4beW96H_6FyrByq22cvU5JDF-i8e5GIfV4wg1SpCvjwAJt74FaqkAb2gzqE7ll\/s728-nu-rw-lo-l85-e365\/core-d.png\" width=\"729\" height=\"91\"\/><\/a><\/div>\n<\/div>\n<p>According to a report from Google-owned Mandiant, ShinyHunters is assessed to be exploiting a bypass for CVE-2026-35273 by using a URL-encoding trick to get around a web application firewall (WAF) rule designed to block the vulnerable Environment Management Hub (PSEMHUB) endpoint.<\/p>\n<p>The Hacker News has contacted both the FBI and Oracle for comment, and we will update the story if we hear back. Accenture, in a statement shared with Reuters, said it was \u00abproud to support the mission of the FBI and will continue to do so.\u00bb<\/p>\n<p>The development is the latest twist in the operational history of ShinyHunters, which has had two of its members arrested as the FBI continues its investigation into the breach. The agency said it&#8217;s actively working with partners to obtain and execute more leads, and warned more arrests are likely to come.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>\ue804Ravie Lakshmanan\ue802Oct 06, 2026 The U.S. Federal Bureau of Investigation (FBI) has removed an Accenture contractor for their alleged role in a ShinyHunters-breach that led to the theft of personal&hellip;<\/p>\n","protected":false},"author":1,"featured_media":3394,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[3668,278,49,3669,252,1060,348,2229,1615],"class_list":["post-3393","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized","tag-accenture","tag-breach","tag-contractor","tag-failure","tag-fbi","tag-led","tag-patch","tag-removes","tag-shinyhunters"],"_links":{"self":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/posts\/3393","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3393"}],"version-history":[{"count":0,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/posts\/3393\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/media\/3394"}],"wp:attachment":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3393"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3393"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3393"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}