Nissan disclosed a data breach exposing current and former employees' personal and financial information after attackers exploited an Oracle PeopleSoft zero-day linked to ShinyHunters. The incident is part of a broader campaign first reported on June 10-11, 2026 that hit over 100 organizations, prompting Nissan to offer monitoring services and tighten payroll security.
Oracle informed Nissan that threat actors obtained personnel records from hundreds of companies and that Nissan was specifically targeted.
The group is known for targeting Salesforce, Snowflake, third-party integration partners, and other cloud environments.
This breach underscores the persistent risk of unpatched enterprise HR systems and the speed with which zero-days in widely used platforms like PeopleSoft can cascade across sectors.
Tap a lens to see what this story means for you.
Liked this? The Brief brings you the whole day in tech, verified, every morning.
Two minutes, free forever. What's in The Brief →
See what’s happening right now
The Feed runs all day — short, verified briefs the moment they break.
Open the FeedFollow @thecircuitry_
Every story we publish, as it happens. No noise between.
Reader-supported
The Circuitry is a passion project I've always wanted to build, and I love the work behind it.
Running it costs real money. APIs, hosting, time. To keep improving the site and growing this into something useful for everyone, those costs have to be covered.
Any contribution is appreciated. If not, no pressure. Thanks for reading.
Mathspace disclosed that attackers stole personal data belonging to 1,079,819 students, staff, and parents or guardians in Australia and New Zealand after breaching its Metabase system. The incident is the latest in a campaign exploiting a Metabase zero-day vulnerability used by multiple companies.
The FBI is investigating the dark web sale of scans from more than 153 million US and Canadian drivers licenses obtained via an ongoing breach at a Louisiana identity verification company. The incident underscores the lasting danger of stolen physical identity documents that cannot be reset like passwords and the growing scale of cyber-enabled identity theft.
ShinyHunters published data from 12.9 million genuine Carhartt accounts after the apparel company refused a $3.3 million ransom. The breach, which also exposed records for more than 15,000 employees, originated from Carhartt's Databricks analytics platform.
ShinyHunters obtained and later leaked personal data belonging to 1.6 million RingCentral accounts after a July breach. The incident touched only a limited portion of the cloud communications provider’s customers and left core services untouched.
Medical Computer Business Services disclosed a 2025 network breach that exposed the sensitive information of 1,261,464 people. The incident highlights risks to healthcare data aggregators that process patient records for multiple providers.
