AI Governance
Data Centers
Drones
Climate
Privacy
2026 Maine Senate
Bob Dylan
Last Update: 10/27/2026 at 6:00 AM EST
PeopleSoft Zero-Day Campaign
Coverage from IT Brew, TechNadu, and others
The campaign involved exploitation of the Oracle PeopleSoft Enterprise PeopleTools vulnerability CVE-2026-35273, which Google and Mandiant linked to ShinyHunters activity.
Oracle issued warnings and mitigations, while CISA listed the flaw as known exploited. Nissan reported potential exposure of employee, payroll, tax, banking, and identification data across four countries; the National Association of Insurance Commissioners also reported stolen material appearing online, while outside experts said its regulatory reporting systems were not compromised. The episode illustrates how a vulnerability in enterprise personnel and financial systems can lead to extortion, breach notifications, and organization-specific containment measures.
Looking Back
109 Day Timeline
Jun 10
Jun 28
Jul 16
Aug 3
Aug 21
Sep 8
Sep 26
All Articles28 articles
Important
Nissan reported a zero-day vulnerability in Oracle PeopleSoft that, between May 27 and June 9, enabled unauthorized access to employee PII including payroll and Social Security data.
7/6/2026 • Data Breaches & Exposure Events • General
Nissan notified the California Attorney General after ShinyHunters exploited Oracle PeopleSoft PeopleTools using CVE-2026-35273, exposing employee financial and identity data across multiple countries.
6/30/2026 • Data Breaches & Exposure Events • General
ShinyHunters ransomware operators used a PeopleSoft zero-day to extort multiple organizations, including Nissan and NAIC, with breach notifications filed in California.
6/30/2026 • Data Breaches & Exposure Events • General
Nissan and NAIC confirmed ShinyHunters-linked cyber extortion attacks using a PeopleSoft PeopleTools zero-day, with potential employee data exposure across the U.S., Canada, Mexico, and Brazil.
6/30/2026 • Data Breaches & Exposure Events • General
Nissan and NAIC disclosed PeopleSoft-linked cyber extortion after ShinyHunters exploited CVE-2026-35273, with impact potentially spanning the United States, Canada, Mexico, and Brazil.
6/30/2026 • Data Breaches & Exposure Events • General
Nissan and NAIC confirmed PeopleSoft cyber extortion in 2026 after ShinyHunters exploited Oracle PeopleTools CVE-2026-35273, warned by Oracle and CISA.
6/30/2026 • Data Breaches & Exposure Events • General
Nissan Americas disclosed a May 27 to June 9, 2026 breach involving Oracle PeopleSoft zero-day SSRF exploitation, exposing sensitive employee data and triggering monitoring and regulator notifications.
6/30/2026 • Data Breaches & Exposure Events • General
During a 2026 exploitation campaign, Nissan disclosed a potential employee data breach linked to compromised Oracle PeopleSoft systems affecting personnel in the United States, Canada, Mexico, and Brazil.
6/29/2026 • Data Breaches & Exposure Events • General
ShinyHunters published 3.1TB of claimed NAIC breach data in late June 2026 after NAIC confirmed an Oracle PeopleSoft intrusion and Google Mandiant confirmed attribution.
6/28/2026 • Data Breaches & Exposure Events • General
ShinyHunters claimed Council of Europe data theft in connection with Oracle PeopleSoft CVE-2026-35273, while Google reported related exploitation affecting 100+ organizations.
6/15/2026 • Data Breaches & Exposure Events • General
Nissan reported a PeopleSoft zero-day incident in breach notice filings with the California Attorney General, citing potential SSN and financial data exposure across the US, Canada, Mexico, and Brazil.
7/2/2026 • Data Breaches & Exposure Events • General
Nissan Americas disclosed a PeopleSoft-related breach affecting employees in the United States, Canada, Mexico, and Brazil after Oracle notified the company of CVE-2026-35273 exploitation.
6/30/2026 • Data Breaches & Exposure Events • General
Nissan disclosed a PeopleSoft-linked employee data breach in the United States, Canada, Mexico, and Brazil after exploitation of CVE-2026-35273 tied to ShinyHunters.
6/30/2026 • Data Breaches & Exposure Events • General
Nissan and the NAIC confirmed ShinyHunters data theft after Oracle PeopleSoft PeopleTools CVE-2026-35273 exploitation, with suspected impact across the United States, Canada, Mexico, and Brazil.
6/30/2026 • Data Breaches & Exposure Events • General
Nissan disclosed a PeopleSoft zero-day breach affecting employee and payroll records between May 27 and June 9, following Oracle and Mandiant notifications tied to ShinyHunters.
6/30/2026 • Data Breaches & Exposure Events • General
NAIC confirmed a June PeopleSoft zero-day cyberattack after ShinyHunters claimed a dark-web leak of insurer regulatory and order data.
6/26/2026 • Cybersecurity Tech (Privacy-Relevant) • General
Nissan disclosed a PeopleSoft-related employee data breach after ShinyHunters-linked attackers exploited CVE-2026-35273 in 2026.
6/29/2026 • Data Breaches & Exposure Events • General
NAIC said ShinyHunters gained access to NAIC systems using an Oracle PeopleSoft zero-day, and NAIC reported no evidence of PII exposure after June 11 investigation.
6/29/2026 • Data Breaches & Exposure Events • General
NAIC disclosed unauthorized access to PeopleSoft systems on June 17, 2026, tied to ShinyHunters activity, with FBI involvement and online publication of alleged data by June 25.
6/29/2026 • Cybersecurity (Privacy-Relevant) • General
NAIC confirmed a PeopleSoft zero-day cyberattack with dark-web data leakage on June 17, after detecting the intrusion on June 11 and citing Oracle emergency patching.
6/26/2026 • Data Breaches & Exposure Events • General
NAIC confirmed June 11 unauthorized access tied to Oracle CVE-2026-35273, while reporting no compromise of PII or payment data.
6/26/2026 • Data Breaches & Exposure Events • General
Google Threat Intelligence Group and Mandiant reported a ShinyHunters compromise of Oracle PeopleSoft between May 27 and June 9, with Oracle issuing a June 10 security alert.
6/15/2026 • Data Breaches & Exposure Events • General
Oracle issued an out-of-band advisory in 2026 for CVE-2026-35273 in PeopleSoft PeopleTools, as ShinyHunters-linked reporting described targeting hundreds of PeopleSoft instances.
6/12/2026 • Cybersecurity (Privacy-Relevant) • General
Interesting
Federman & Sherwood investigated a Nissan North America data breach reported to the Texas Attorney General on June 29, 2026.
6/29/2026 • Data Breaches & Exposure Events • General
Nissan North America reported an Oracle PeopleSoft breach in which sensitive employee data may have been accessed, with attorneys seeking class-action claim input.
6/26/2026 • Data Breaches & Exposure Events • General
Oracle warned about CVE-2026-35273 in PeopleSoft PeopleTools, which enables unauthenticated remote code execution and was reportedly exploited by ShinyHunters in data theft attacks.
6/11/2026 • Data Breaches & Exposure Events • General
ShinyHunters claimed responsibility for data theft and extortion demands against Oracle PeopleSoft instances affecting more than 100 organizations, including Nottingham University.
6/10/2026 • Cybersecurity Tech (Privacy-Relevant) • General
Google's Mandiant and Threat Intelligence Group reported that ShinyHunters exploited unpatched Oracle PeopleSoft servers in a worldwide campaign using encoded paths during the latest attack wave.
9/26/2026 • Cybersecurity (Privacy-Relevant) • General