Global IT services giant Accenture has just confirmed a cybersecurity incident targeting their internal systems. This confirmation comes after a hacker using the alias "888" claimed to have successfully breached the company's system and stolen 35 GB of data.
The cyber threat actor is now offering the stolen data on an underground cybercrime forum. The data claimed to be in the hacker's possession includes a variety of sensitive information, such as source code, RSA keys, SSH keys, as well as Azure Personal Access Tokens (PAT) and Azure storage access keys.
As proof of the claim, the hacker included screenshots showing an Azure DevOps repository named "121123_AtriasTalentAcademy". This data is alleged to be stored in Accenture's official domain, heightening concerns regarding potential further security risks if these credentials are misused.
In response, Accenture stated that it moved quickly to identify and close the vulnerability used as the entry point for the attack. The company emphasized that this incident was isolated and did not disrupt operational continuity or services provided to clients worldwide.
