Cybercriminals claim breach of Oracle PeopleSoft servers at 100-plus organizations

The ShinyHunters hacking group claimed on May 16, 2024, to have breached the Oracle PeopleSoft servers of over 100 organizations. This group stated they obtained sensitive data from these compromised systems. Among the affected entities are numerous universities, which often store extensive student and employee records within PeopleSoft. The hackers asserted that the stolen data includes personal identifiable information (PII) and other confidential details. ShinyHunters has a history of targeting large organizations and selling stolen data on dark web forums. Oracle, the software provider, has not yet issued a public statement regarding this specific claim. The potential impact on the affected organizations and their users is significant, given the nature of the data typically stored in HR and student information systems like PeopleSoft. This incident highlights ongoing cybersecurity risks for institutions relying on legacy enterprise software.