CRITICALZero Day
Global

NAIC says public data stolen in ShinyHunters' PeopleSoft breach

·Source: BleepingComputer

Updated:

Executive Summary

The National Association of Insurance Commissioners (NAIC) says the ShinyHunters extortion group stole only publicly available data, outdated logs, and configuration files after breaching its systems by exploiting a zero-day vulnerability in an Oracle PeopleSoft server. [...]

Analysis

The National Association of Insurance Commissioners (NAIC) says the ShinyHunters extortion group stole only publicly available data, outdated logs, and configuration files after breaching its systems by exploiting a zero-day vulnerability in an Oracle PeopleSoft server. [...]
Source Attribution

Originally published by BleepingComputer on Jun 29, 2026.

Related Threats

CRITICALZero DayPOC

Researcher Behind 'Exploitarium' Explains Release of Undisclosed Zero-Day Exploits

Infosecurity spoke with the researcher who dumped over 30 proof-of-concept exploits without disclosing the vulnerabilities first

Infosecurity Magazine
HIGHData Breach

Medtronic notifies customers impacted by ShinyHunters data breach

Healthcare device firm Medtronic is notifying affected customers about a data breach that exposed their personal data to an unauthorized third party. [...]

BleepingComputer
MEDIUMVulnerability

Medtronic Starts Notifying Individuals Affected by April 2026 Cyberattack

Medtronic has started issuing notifications to individuals affected by an April 2026 cyberattack. The ShinyHunters threat group claimed responsibility for […] The post Medtronic Starts Notifying Individuals Affected by April 2026 Cyberattack appeared first on The HIPAA Journal .

HIPAA Journal