![Fixxx](https://img-cc.com/data/avatars/m/50/50473.jpg?1724250746"){kind=avatar}
Fixxx
Moder
- Joined
- 20.08.24
- Messages
- 1,153
- Reaction score
- 4,600
- Points
- 113
IT services giant Accenture has confirmed it suffered a security breach after a threat actor claimed to have stolen 35 GB of source code and other data from the company.
Accenture is a global professional services company that provides consulting, technology, cloud, engineering, and managed services to businesses and governments worldwide. The statement comes after a threat actor known as "888" claimed to have stolen 35 GB of data from the company in July and began offering the data for sale on a cybercrime forum.
According to the threat actor, the data includes source code, RSA keys, SSH keys, Azure PAT (personal access tokens), Azure Storage access keys, and configuration files.
To support their claims, the threat actor shared a screenshot that appears to show them cloning an Azure DevOps repository named "121123_AtriasTalentAcademy" that was hosted under a redacted accenture.com hostname. While Accenture confirmed the breach, the company did not comment on the threat actor's claims regarding the amount or type of data that may have been accessed or exfiltrated. Accenture also did not disclose how attackers gained access or whether customer data was affected. The same threat actor previously attempted to sell Accenture employee data following a third-party breach in 2024. Accenture also suffered a data breach in 2021 after the LockBit ransomware gang stole data from its systems.
"We are aware of this isolated matter, and we have remediated its source. There is no impact to Accenture operations and service delivery," Accenture told.
Accenture is a global professional services company that provides consulting, technology, cloud, engineering, and managed services to businesses and governments worldwide. The statement comes after a threat actor known as "888" claimed to have stolen 35 GB of data from the company in July and began offering the data for sale on a cybercrime forum.
"Today I am selling the Accenture Data Breach, thanks for reading and enjoy!," reads the forum post. "In July 2026, Accenture suffered a data breach which resulted in just over 35gb of source codes getting stolen from the company."
According to the threat actor, the data includes source code, RSA keys, SSH keys, Azure PAT (personal access tokens), Azure Storage access keys, and configuration files.
*forum post attempting to sell stolen Accenture data.
To support their claims, the threat actor shared a screenshot that appears to show them cloning an Azure DevOps repository named "121123_AtriasTalentAcademy" that was hosted under a redacted accenture.com hostname. While Accenture confirmed the breach, the company did not comment on the threat actor's claims regarding the amount or type of data that may have been accessed or exfiltrated. Accenture also did not disclose how attackers gained access or whether customer data was affected. The same threat actor previously attempted to sell Accenture employee data following a third-party breach in 2024. Accenture also suffered a data breach in 2021 after the LockBit ransomware gang stole data from its systems.