Accenture Confirms Data Breach After Hacker Offers Stolen Data

IT services firm Accenture confirmed on November 3, 2021, that it experienced a security breach. This confirmation followed a claim by a threat actor who stated they had stolen 35 gigabytes of source code and other data from the company. The hacker began offering the stolen data for sale on a dark web forum.

Details of the breach emerged when the threat actor, identified as a known ransomware group, posted evidence of the intrusion on a cybercrime marketplace. The group claimed to have gained access to Accenture's internal systems, including source code repositories. Accenture stated that its investigation into the incident is ongoing and that it is working with cybersecurity experts to assess the scope and impact of the breach.

The company has not disclosed the specific nature of the data compromised beyond source code, but the threat actor's claims suggest a significant exfiltration of proprietary information. Accenture is a major global provider of IT services and consulting, serving numerous large corporations and government entities. The potential exposure of its source code could have far-reaching implications for its clients and its own intellectual property.

Accenture has initiated its incident response protocols and is implementing measures to secure its systems and prevent further unauthorized access. The company has also stated it will notify relevant authorities and stakeholders as its investigation progresses. The incident highlights the ongoing risks faced by large technology service providers, which often hold vast amounts of sensitive data.