The Circuitry
THE CIRCUITRYYour one-stop source for all tech news
HOMETODAYNEWSFEEDEVENTS
BOOKMARKS
RSS
© 2026 The Circuitry
About UsSourcesContactCorrectionsPrivacy
  • Today
  • Feed
  • Events
  • Saved
Scroll for more
Verification
VERIFIEDConfidence: HIGH
Source identified
Claims cross-referenced
No discrepancies found
Fact-check summary

The Register, BleepingComputer, and class-action trackers confirm Nissan's June 29 disclosure of an employee data breach tied to the ShinyHunters Oracle PeopleSoft zero-day campaign.

Sourcing
3independent sources

via BleepingComputer

BleepingComputer · track record
51Stories
100%Verified
3430d
All sources →
Markets
ORCL···

Live quote · not investment advice

Home/Tech/Nissan discloses employee data breach via Oracle PeopleSoft zero-day
VERIFIEDBy Xavier Rivera· ·2 min read

Nissan discloses employee data breach via Oracle PeopleSoft zero-day

Nissan disclosed a data breach exposing current and former employees' personal and financial information after attackers exploited an Oracle PeopleSoft zero-day linked to ShinyHunters. The incident is part of a broader campaign first reported on June 10-11, 2026 that hit over 100 organizations, prompting Nissan to offer monitoring services and tighten payroll security.

Source:BleepingComputer
Post
Nissan discloses employee data breach via Oracle PeopleSoft zero-day
TL;DRAI · 60 sec read

Nissan disclosed a breach exposing current and former employees' personal data after attackers exploited a zero-day in its Oracle PeopleSoft system. The incident, tied to ShinyHunters, may include Social Security numbers, banking details, and tax records for staff in the US, Canada, Mexico, and Brazil. It forms part of a broader campaign hitting over 100 organizations.

Nissan has warned current and former employees that their personal data was exposed in a breach after attackers exploited an Oracle PeopleSoft vulnerability previously linked to the ShinyHunters extortion group.

Nissan confirms targeted attack on its Oracle PeopleSoft deployment. The automaker disclosed the incident in notifications filed with the California Attorney General's Office on June 29, 2026. Nissan Americas uses Oracle PeopleSoft to manage employee information including payroll, tax administration, and personnel records. Oracle informed Nissan that threat actors obtained personnel records from hundreds of companies and that Nissan was specifically targeted.
Oracle informed Nissan that threat actors obtained personnel records from hundreds of companies and that Nissan was specifically targeted.

Scope of exposed employee data remains under investigation. Nissan states it is in the early stages of its probe and has not yet determined the full impact. Accessed information may include contact details, banking information, Social Security numbers, Social Insurance Numbers, National Identification Numbers, financial and tax records, and dependent and beneficiary data. The breach is believed to affect employees in the United States, Canada, Mexico, and Brazil.
From The CircuitryThe Feed — live briefs across tech, all day.See what’s happening →
Response includes incident containment and support for affected staff. Nissan activated its incident response plan, engaged external cybersecurity experts, and secured affected systems. The company is working with Oracle to address the vulnerability, ended unauthorized access, and is implementing additional identity verification for payroll requests. It will offer free credit and dark web monitoring services where available and send follow-up notifications to confirmed victims detailing their exposed data.
The group is known for targeting Salesforce, Snowflake, third-party integration partners, and other cloud environments.
Breach tied to widespread ShinyHunters exploitation of Oracle zero-day. The incident stems from attacks first reported on June 10-11, 2026 that leveraged a zero-day vulnerability in Oracle PeopleSoft. ShinyHunters claimed responsibility, stating over 300 instances across 100 organizations were breached. Oracle later disclosed CVE-2026-35273 and issued emergency mitigations. Mandiant confirmed the flaw was exploited as a zero-day between May 27 and June 9, 2026, primarily hitting education-sector organizations, and notified over 100 victims. ShinyHunters has since begun leaking stolen data from some of those attacks.
ShinyHunters history centers on cloud SaaS data theft. The group is known for targeting Salesforce, Snowflake, third-party integration partners, and other cloud environments. It recently conducted a separate attack on Instructure Canvas that stole 280 million student records. Nissan is now among the confirmed corporate victims in the PeopleSoft campaign.

EXPERT TAKE

This breach underscores the persistent risk of unpatched enterprise HR systems and the speed with which zero-days in widely used platforms like PeopleSoft can cascade across sectors.

Why this mattersAI · ~100 words

Tap a lens to see what this story means for you.

Reader-supported
DonateBuy me a coffee →Follow@thecircuitry_ →Follow@thecircuitry.to →

Reader-supported · Daily Brief

Daily brief at 7 AM ET. Top tech stories, every morning. Sourced and fact-checked.

HELP US IMPROVE
From The Circuitry

See what’s happening right now

The Feed runs all day — short, verified briefs the moment they break.

Open the Feed →
From The Circuitry

Follow @thecircuitry_

Every story we publish, as it happens. No noise between.

Follow on X ↗On Bluesky ↗

Reader-supported

The Circuitry is a passion project I've always wanted to build, and I love the work behind it.

Running it costs real money. APIs, hosting, time. To keep improving the site and growing this into something useful for everyone, those costs have to be covered.

Any contribution is appreciated. If not, no pressure. Thanks for reading.

Buy me a coffee
data-breachoracleshinyrhunterspeoplesoft
More fromBleepingComputer
  • Attackers actively exploit critical Oracle E-Business Suite vulnerability

    Tech · 8h
  • KDDI breach exposes up to 14.2M email logins at six Japanese ISPs

    Tech · 1d
  • CISA gives feds until Sunday to patch exploited Cisco and PTC flaws

    Tech · 3d
More inTech
  • Samsung and SK Hynix reveal $590 billion DRAM expansion plan

    Tech · 19m
  • Anonymous researcher drops 0-day 'exploitarium' repo

    Tech · 20m
  • Apple asks Supreme Court to slash $502M Optis patent license bill

    Tech · 43m
SupportThe Work

The Circuitry is reader-supported. If you find the daily brief useful, you can buy me a coffee to keep it going.

Buy a coffee →
SubscribeCircuitry Brief

Daily brief at 7 AM ET. Top tech stories, every morning.

MORE IN TECH

Samsung and SK Hynix reveal $590 billion DRAM expansion plan

Samsung, SK Hynix and the South Korean government have announced a $590 billion plan to double DRAM production capacity with four new factories by the mid-2030s. The move comes four days after a U.S. lawsuit accused the companies of restricting standard memory supply to inflate prices, but analysts say consumer RAM prices will keep rising through 2028.

Anonymous researcher drops 0-day 'exploitarium' repo

An anonymous researcher publishing as bikini released exploit code for zero-day vulnerabilities across 15 projects in a now-removed GitHub repository called exploitarium without prior vendor notification. At least two critical issues, a pre-auth RCE in libssh2 and an authentication bypass in Gitea Docker setups, are under active attack according to analysts who also linked the work to AI-assisted fuzzing.

Apple asks Supreme Court to slash $502M Optis patent license bill

Apple is urging the UK Supreme Court to reverse a ruling that raised its patent licensing obligation to Optis Wireless from $56 million to $502 million, arguing the appellate methodology was flawed and arbitrary.