Accenture Faces Alleged Data Breach as Hackers Claim 35 GB Source Code Theft 

Leave a Comment / Cybersecurity, Data Protection, Enterprise Technology, Industry News / By cxojunction

An alleged data breach involving Accenture has raised fresh concerns over the security of enterprise source code and cloud development environments. A threat actor known as “888” claims to have stolen approximately 35 GB of sensitive data, including source code and access credentials, and is reportedly offering the data for sale on a cybercrime forum.

According to the claims, the stolen information includes source code, RSA keys, SSH keys, Azure Personal Access Tokens (PATs), Azure Storage Access Keys, and configuration files. To support the allegations, the threat actor shared screenshots that appear to show access to an Azure DevOps repository, including repository metadata and a partial Git clone operation. The listing has been advertised as a one-time sale with payment requested in Monero.

This is not the first time the actor has claimed to target Accenture. The same alias was linked to an unverified incident in 2024, which the company had publicly disputed. While the latest claims have attracted attention, the full extent of the alleged breach remains unverified.

Accenture has acknowledged the incident and stated that it has remediated the source of the breach. The company also emphasized that there has been no impact on its operations or service delivery. However, it has not confirmed the volume of data or the specific information the threat actor claims to possess.

Until forensic evidence or additional data samples become available, security experts recommend treating the reported scope of the breach with caution. As a precaution, organizations using Azure DevOps should review repository access logs, rotate Personal Access Tokens, and verify the security of privileged credentials to reduce potential risks

What this means for organisations

The incident highlights the need for organisations to strengthen the security of development environments, safeguard privileged credentials, and continuously monitor source code repositories. Regular access reviews, credential rotation, and proactive security controls can help reduce the risk and impact of potential source code and supply chain compromises.

CXO Junction remains dedicated to providing you with exclusive insights into transformative leadership journeys. Stay tuned for more updates as we continue to bring industry news to you.

Source: Accenture Data Breach – Hackers Allegedly Claim to Have Stolen 35 GB of Source Code | Cyber Security News | https://cybersecuritynews.com/accenture-data-breach/