Accenture confirms breach after hacker offers 35GB of data for sale
THE BRIEF
Accenture confirmed an isolated security incident after a threat actor offered 35GB of allegedly stolen data for sale. The attacker claimed the dataset included source code, RSA and SSH material, Azure tokens and configuration files. Accenture said the source of the incident was remediated and operations were not affected.
WHY IT MATTERS
Even a contained breach at a major technology-services provider creates supply-chain questions because credentials, code and cloud tokens can have downstream value against customers and partners.
WHO SHOULD CARE
Third-party risk teams, cloud-security teams and CISOs.
WHAT TO DO NOW
- Review shared Accenture access
- Rotate exposed integration credentials where relevant
- Monitor for downstream phishing and token abuse
VERIFICATION NOTE
Backfilled historical brief from an established reporting or official source.
