CERT24FBI Blames Contractor’s Missed Patch for ShinyHunters Breach
The FBI removed an Accenture contractor after a data breach exposed the personal information of thousands of bureau employees. The FBI’s review so far points to a security failure on a platform managed by a third-party organization after the contractor failed to apply a security patch issued to secure the platform. According to Reuters sources, the system was Oracle’s PeopleSoft human resources platform and the outside organization was Accenture. ShinyHunters claimed it exploited PeopleSoft to access the FBI jobs website.