Accenture Confirms Data Breach \u2013 Hacker Claims Theft of Internal Source Code
\n \t
\n
<\/BR>
\n
\n \t
\n
<\/BR><\/p>\n
IT services and consulting giant Accenture has confirmed it suffered a security breach after a threat actor claimed to have stolen 35 GB of source code and other sensitive data from the company.<\/p>\n
A threat actor operating under the alias \u201c888\u201d posted a listing on the cybercrime forum PwnForums on July 6, 2026, offering the alleged Accenture data for a one-time sale, payable only in Monero (XMR); at Cybersecuritynews, we reported on this alleged claim Yesterday<\/a>.<\/p>\n The post claimed that \u201cIn July 2026, Accenture suffered a data breach which resulted in just over 35 GB of source codes getting stolen from the company\u201d.<\/p>\n According to the actor, the exfiltrated haul spans source code, RSA keys, SSH keys, Azure Personal Access Tokens (PATs), Azure Storage Access Keys, and internal configuration files.<\/p>\n As proof of possession, \u201c888\u201d posted a screenshot that appears to show a private Azure DevOps repository hosted under an accenture.com domain, along with what appears to be a \u201cgit clone\u201d command pulling from an internal \u201cAtriasTalentAcademy\u201d repo listed as private with visibility restrictions.<\/p>\n When contacted by CybersecurityNews, Accenture confirmed the incident but declined to validate the scope or specific data types cited by the attacker. A company spokesperson stated: \u201cWe are aware of this isolated matter, and we have remediated its source.<\/p>\n There is no impact to Accenture operations and service delivery\u201d. The company has not disclosed whether production source code or client-facing credentials were part of the compromised material. Security researchers note that no independent forensic analysis or leaked data sample has yet been published to verify the full scope of the claims.<\/p>\n This is not \u201c888\u201d\u2018s first alleged run at Accenture. In June 2024, the same actor tried to sell a dataset described as belonging to 32,826 current and former Accenture employees, claiming it stemmed from a third-party breach.<\/p>\n Accenture publicly disputed that claim at the time, stating its own analysis found the leaked set contained \u201conly three names and Accenture email addresses\u201d and no other Accenture-related information.<\/p>\n Separately, Accenture was hit by the LockBit<\/a> ransomware gang in August 2021, when attackers claimed to have stolen over 6TB of data and demanded a $50 million ransom.<\/p>\n The mix of data types claimed in this latest incident is notable because Azure PATs, storage access keys, and SSH\/RSA keys, if genuine and unrotated, could allow further lateral access into cloud infrastructure or code repositories beyond the initial breach point.<\/p>\n Source code exposure also raises concerns around potential hardcoded secrets or intellectual property leakage, though Accenture has stated there is no impact on operations or service delivery.<\/p>\n Stop Accepting SLAs Written for 2019 SOCs \u2013 Here\u2019s the 2026 AI SLA Vendor<\/strong> Checklist<\/strong> \u2013 Download Free AI SOC SLA <\/strong>Guide<\/a><\/strong><\/p>\n The post Accenture Confirms Data Breach \u2013 Hacker Claims Theft of Internal Source Code<\/a> appeared first on Cyber Security News<\/a>.<\/p>\n<\/div>\n