Oracle PeopleSoft ShinyHunters Breach
On 10 June, BleepingComputer reported that attackers had hacked Oracle PeopleSoft servers in data-theft attacks attributed to ShinyHunters.
By 22 September, the claim had widened. BleepingComputer reported that ShinyHunters said it had breached the FBI and stolen data through a PeopleSoft zero-day attack. The Hacker News identified the flaw as CVE-2026-35273 and reported that the group targeted universities. TechCrunch said ShinyHunters claimed to have compromised PeopleSoft servers at more than 100 organizations, including many universities.
According to BleepingComputer and The Hacker News, the attackers bypassed web application firewalls and deployed web shells. Reuters reported Google’s view that ShinyHunters had expanded its attacks on Oracle PeopleSoft. BleepingComputer also reported that Nissan disclosed an employee data breach connected to the Oracle zero-day attacks. It also reported that the NAIC said ShinyHunters stole public data in its PeopleSoft breach.
Taking this as factual, impact is 0%. The reports identify affected universities, Nissan employees, the NAIC, and FBI agents and job applicants. The claimed access to more than 100 organizations broadens the pool of potential victims. The tracked event currently carries no measured impact. Given that extensive list, the arithmetic is doing its best impression of reassurance.
Watch for direct disclosures from Oracle, the FBI and other named organizations, along with technical evidence tying CVE-2026-35273, the WAF bypass and deployed web shells to the claimed thefts. Further victim notices would also clarify whether the reported scope exceeds ShinyHunters’ claims.
The ShinyHunters hacking gang claims to have compromised the Oracle PeopleSoft servers of more than 100 organizations, including many universities.
The ShinyHunters extortion crew exploited an unpatched flaw in Oracle PeopleSoft to break into enterprise systems, steal data, and demand payment to keep it private. The campaign
Google says ShinyHunters hackers targeting education sector via Oracle exploit reut.rs/444hphq
The ShinyHunters extortion gang is using a URL-encoding trick to bypass web application firewall rules that mitigate the Oracle PeopleSoft CVE-2026-35273 flaw, allowing the threat
The cyber extortion group known as ShinyHunters on Tuesday claimed it had breached the U.S. Federal Bureau of Investigation and stolen data belonging to current and former
Nissan is warning that it suffered a data breach affecting current and former employees after threat actors exploited an Oracle PeopleSoft vulnerability in data theft attacks
Oracle is warning about a critical PeopleSoft Suite zero-day vulnerability tracked as CVE-2026-35273 that allows unauthenticated remote code execution, with the flaw actively
The National Association of Insurance Commissioners (NAIC) says the ShinyHunters extortion group stole only publicly available data, outdated logs, and configuration files after
NewsHive monitors these sources continuously. All signal titles above link to the original reporting.
Intelligence by NewsHive. Need help navigating what this means for your business? Contact GeekyBee →