FBI removes contractor working with its PeopleSoft system after data breach, says report
FBI removed an Accenture contractor after unpatched PeopleSoft exposed employee data, which ShinyHunters claimed.
The FBI removed a contractor after a breach exposed personal details of FBI employees, Cyber Division Assistant Director Brett Leatherman told Reuters. He said a third-party platform was left unpatched after a contractor failed to apply a security patch that had been issued. Reuters sources identified the contractor as Accenture and the platform as Oracle PeopleSoft, the HR system ShinyHunters claimed to have exploited last month.
- FBI employee personal details were exposed in the breach.
- The FBI blamed a contractor for missing a required patch.
- Reuters sources identify Accenture and Oracle PeopleSoft.
- ShinyHunters previously claimed they exploited the HR system.
- The bureau removed the contractor and says risk is mitigated.
Full article176 words · extracted from csoonline.com · click to collapse
The US Federal Bureau of Investigation has removed an Accenture contractor working on its PeopleSoft installation over their role in a data breach that exposed personal details of FBI employees, Reuters reported Monday.
This is the first time that anyone other than the hacker group Shinyhunters that claimed responsibility for the breach has linked it to PeopleSoft.
“To date, our review has determined that the incident occurred as the result of a security failure of a platform managed by a third-party organization — after a contractor failed to implement a security patch explicitly issued to secure the platform,” FBI Cyber Division Assistant Director Brett Leatherman told Reuters. “As such, the FBI has removed the contractor and taken all necessary steps to both mitigate any further risk and protect our workforce.”
Accenture was the third-party organization Leatherman would not identify, “two sources familiar with the matter” told Reuters.
As for the unnamed, unpatched platform, Reuters’ sources said that was Oracle PeopleSoft, the HR system that hacker group ShinyHunters claimed to have exploited in last month’s break-in.
Text extracted automatically; images, tables and formatting may be missing. Original: https://www.csoonline.com/article/4231356/fbi-removes-contractor-working-with-its-peoplesoft-system-after-data-breach-says-report.html