Accenture confirms breach after hacker offers 35 GB of stolen data

Accenture has confirmed a security breach after a threat actor known as "888" offered approximately 35 GB of allegedly stolen source code and credentials for sale. The incident marks the latest in a string of breaches for the global IT services provider.

Source:BleepingComputer

Post

Accenture confirms breach after hacker offers 35 GB of stolen data

TL;DRAI · 60 sec read

IT services giant Accenture has confirmed a security breach after a threat actor known as "888" began selling what was reportedly 35 GB of source code and additional material taken from the company.

Accenture acknowledges the incident and states remediation is complete. "We are aware of this isolated matter, and we have remediated its source. There is no impact to Accenture operations and service delivery," the company told BleepingComputer.

BleepingComputer could not independently verify the full scope of the data stolen.

The threat actor lists specific types of data for sale on a cybercrime forum. In the July 2026 post, the actor wrote, "Today I am selling the Accenture Data Breach, thanks for reading and enjoy!" The seller alleged the intrusion produced "just over 35gb of source codes" along with RSA keys, SSH keys, Azure personal access tokens, Azure Storage access keys, and configuration files.

https://x.com/DarkWebInformer/status/1803558395137368216

The seller also posted a screenshot that appears to depict cloning an Azure DevOps repository called "121123_AtriasTalentAcademy" under a redacted accenture.com address. BleepingComputer could not independently verify the full scope of the data stolen.

From The CircuitryThe Feed — live briefs across tech, all day.See what’s happening →

Accenture withholds details on breach method and potential customer impact. The firm offered no comment on the claimed volume or categories of information accessed or exfiltrated. It likewise declined to reveal how the attackers gained entry or whether any customer data was involved.

It likewise declined to reveal how the attackers gained entry or whether any customer data was involved.

This is the latest in a series of prior Accenture security incidents. The same individual had earlier tried to sell employee information obtained through a 2024 third-party breach. Accenture also experienced an intrusion in 2021 when the LockBit ransomware operation extracted data from its network.

BleepingComputer has asked Accenture further questions about the breach.

EXPERT TAKE

Accenture's limited disclosure on access method and customer data exposure highlights ongoing challenges in enterprise breach transparency.

Why this mattersAI · ~100 words

Tap a lens to see what this story means for you.

Reader-supported

DonateBuy me a coffee →Follow@thecircuitry_ →Follow@thecircuitry.to →

Reader-supported · The Brief

Liked this? The Brief brings you the whole day in tech, verified, every morning. Two minutes, free forever.

HELP US IMPROVE

Reader-supported

The Circuitry is a passion project I've always wanted to build, and I love the work behind it.

Running it costs real money. APIs, hosting, time. To keep improving the site and growing this into something useful for everyone, those costs have to be covered.

Any contribution is appreciated. If not, no pressure. Thanks for reading.

Buy me a coffee

breach cybersecurity Accenture

MORE IN TECH

Samsung to Return Up to $80 Billion to Shareholders in 2026

Samsung Electronics expects 90 trillion won to 110 trillion won available for shareholder returns in 2026, labeling the amount the largest ever by a Korean company. The disclosure follows SK Hynix's buyback announcement and reflects the windfall from AI-fueled memory chip sales.

Apple Music Will Require and Display Made With AI Labels

Apple will apply visible Made With AI labels to songs materially generated using AI on Apple Music, making required Transparency Tags mandatory for material AI use. The change addresses the fact that more than a third of monthly uploads are 100% AI-generated while such tracks represent less than 0.5% of listening.

IBM AIX 7.2, 7.3 and PowerVM VIOS 4.1 Face High-Severity Flaw

IBM disclosed CVE-2026-16841, a high-severity stack buffer overflow in AIX 7.2, 7.3 and PowerVM VIOS 4.1 that could allow remote arbitrary code execution with a CVSS score of 8.8. The flaw, published August 19 2026, requires prompt patching on affected enterprise Unix and virtualization platforms. Direct NVD page not yet surfaced in searches; support page referenced in related IBM AIX CVE reports.