Accenture confirms data breach as hacker advertises internal documents for sale
- Kamy Le
- 5 hours ago
- 3 min read
Accenture, a leading multinational corporation in the global technology services and consulting industry, has officially confirmed a cybersecurity breach of its systems. This move comes immediately after a hacker claimed to have stolen a large amount of the firm's source code and sensitive data, offering it for public sale on a cybercrime forum.
Hacker advertises 35GB of source code for sale and Accenture's response
In July 2026, a hacker using the alias "888" posted a thread on an underground forum stating: "Today I am selling the Accenture Data Breach, thanks for reading and enjoy it!". The attacker claimed to possess over 35GB of data, including source code (the code used to build software), system configuration files, along with a series of critical security keys such as RSA keys, SSH keys, and Microsoft Azure cloud access tokens.
To prove their claim, the hacker shared a screenshot capturing the process of copying an internal data repository belonging to Accenture's domain. Although tech media outlets have not been able to independently verify the full scale of the lost data, Accenture quickly moved to confirm the incident.
Speaking on the matter, Accenture spokesperson Peter Soh stated: "We are aware of this isolated matter, and we have remediated its source. There is no impact to Accenture operations and service delivery." However, the corporation chose to remain silent, refusing to answer in-depth questions regarding how the attacker gained entry or whether customer data was compromised.
Hidden dangers behind the exposed "cryptographic keys"
While Accenture seeks to downplay the severity of the incident, information security experts offer a more cautious perspective. According to an analysis by cyber intelligence firm SOCRadar, exposing source code and configuration keys could place both the enterprise and its partners in a dangerous position.
Put simply, source code is like the detailed blueprint of a house. Armed with this blueprint, attackers can easily understand the internal operational logic of an application, thereby discovering vulnerabilities or hardcoded credentials to find ways to penetrate deeper. Meanwhile, the exposed access keys and tokens act like master keys, allowing hackers to move freely within the enterprise's data repositories and cloud storage services.
SOCRadar warned that, depending on the freshness of the stolen data, this incident has the potential to trigger a domino effect. Malicious actors could leverage the configuration files to scan for vulnerabilities in software used by Accenture's clients or partners. This is particularly concerning given that Accenture currently provides services to the majority of the world's largest corporations on the Fortune Global 500 list.
Accenture's history of facing cybersecurity incidents
This is not the first time the tech giant has encountered trouble with security issues. In the past, Accenture's systems have repeatedly landed in the crosshairs of cybercriminals.
In 2017, security researchers discovered that Accenture had misconfigured storage buckets on the Amazon Web Services cloud service, inadvertently exposing nearly 40,000 plaintext passwords along with various system access keys. In 2021, the corporation further fell victim to the notorious LockBit ransomware group, suffering system encryption and threats of data exposure if a ransom was not paid.
Notably, the very hacker using the alias "888" behind this current incident had also previously claimed to have stolen a massive database of Accenture employees in 2024 from a third party. At that time, Accenture maintained that the attacker had exaggerated the facts and that the data file in reality contained the personal information of a mere three employees.
The data leak incident in July 2026 once again raises major questions about the defensive capabilities of leading technology service enterprises. Currently, the tech world continues to watch whether the data held by hacker "888" will truly cause serious consequences for Accenture's global client network.
Reference: Cybersecurity Dive, Bleeping Computer
Comments