Accenture Confirms Data Breach Amid Hacker's Sale Offer

Accenture, a leading IT services firm, has confirmed it experienced a security breach after a hacker known as "888" claimed to have stolen 35 GB of data, including source code and sensitive credentials. The breach reportedly took place in July, with the hacker advertising the stolen data for sale on a cybercrime forum. In a statement, Accenture acknowledged the incident, stating, "We are aware of this isolated matter, and we have remediated its source. There is no impact to Accenture operations and service delivery."

The hacker's post indicated that the stolen data includes critical information such as RSA keys, SSH keys, Azure personal access tokens, and configuration files. To substantiate their claims, the hacker shared a screenshot appearing to show the cloning of an Azure DevOps repository linked to Accenture. However, BleepingComputer could not independently verify the extent of the data breach.

While Accenture confirmed the breach, it did not comment on the specifics of the data accessed or exfiltrated, nor did it disclose how the attackers gained access to its systems or whether customer data was affected. This incident follows a previous attempt by the same hacker to sell employee data from Accenture after a third-party breach in 2024. Additionally, Accenture faced a data breach in 2021 when the LockBit ransomware group compromised its systems. BleepingComputer has reached out to Accenture for further details and will provide updates as more information becomes available.