Accenture Addresses Security Breach Linked to Azure DevOps Data Theft

Accenture has acknowledged a security incident following claims from a hacker known as 888, who alleges the theft of 35 GB of internal data. This breach reportedly involved sensitive information extracted from a private Azure DevOps repository, a platform utilized by developers for version control and project management. Although Accenture confirmed the issue has been addressed, it did not disclose the specific types of data that were compromised.

The hacker claims that the stolen data includes source code, RSA and SSH keys, and various Azure-related credentials, such as personal access tokens and storage keys. To substantiate these claims, the attacker released screenshots demonstrating a live git clone operation targeting an internal Accenture production URL. The exposure of such credentials is particularly concerning, as they can provide ongoing access to cloud environments and sensitive configuration files if not promptly rotated.

Despite the breach, Accenture has stated that there has been no impact on its global operations or service delivery to clients. This incident follows a series of security challenges faced by the firm, including a ransomware attack by LockBit in 2021 and a previous minor data leak involving the same hacker. Security experts emphasize that the exposure of cloud access tokens and cryptographic keys necessitates a thorough rotation of all potentially compromised secrets to mitigate risks.