FBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters Breach
FBI removes Accenture contractor after patch failure led to ShinyHunters breach.
The FBI has removed an Accenture contractor following a security failure that led to a data breach by the ShinyHunters group. The breach, which compromised the FBI's job portal and exposed personal details of thousands of employees, occurred because a contractor failed to apply a critical security patch to an Oracle PeopleSoft platform. ShinyHunters exploited a vulnerability related to CVE-2026-35273 to bypass security measures.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Accenture?
Get an email when a new story names Accenture, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonA contractor supporting the FBI's job portal failed to apply a critical security patch to an Oracle PeopleSoft platform, leaving a known vulnerability (CVE-2026-35273) open for exploitation by the ShinyHunters threat group. The breach exposed personal details of thousands of FBI employees, demonstrating how a single unpatched system in a third-party managed environment can compromise a high-value government asset. This incident highlights the compounded risk of relying on contractors without enforcing strict, auditable patch compliance requirements. It also underscores that threat actors actively monitor public vulnerability disclosures and move quickly to exploit unpatched systems, making timely patching a non-negotiable security control.
What helps against this
How we list vendors
- Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
- Automated patch management
Known holes get closed in days, not months.
- Third-party risk management (TPRM)
You know which suppliers could hurt you, and you hear quickly when one of them is breached.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- cve — CVE-2026-35273