Accenture Data Breach — Hackers Allegedly Claim to Have Stolen 35 GB of Source Code

A threat actor has claimed responsibility for a massive data breach at consulting giant Accenture, allegedly stealing 35 GB of source code and internal files from the company's servers. The alleged breach was disclosed on a prominent cybercrime forum over the weekend, where the attacker posted samples of the stolen data as proof. The samples reportedly include Java and Python source code, configuration files, and internal documentation. "We are aware of the claims and have immediately launched an investigation with the help of leading cybersecurity experts," an Accenture spokesperson said. "Our client-facing systems remain operational, and we are taking all necessary steps to protect our data and our clients' data." Security researchers who analyzed the leaked samples told Reuters that the data appears authentic and contains proprietary code used in Accenture's internal tooling. The breach, if confirmed in full, would rank among the largest consulting industry data leaks in recent years. The attacker claims to have gained access through a compromised employee VPN credential, exploiting a known vulnerability in Accenture's identity management system. The company had reportedly been aware of the vulnerability but had not yet deployed a patch.

Accenture shares dropped 2.3% in early trading following the news. The company has notified affected clients and is working with law enforcement agencies, including the FBI, to investigate the incident. Cybersecurity experts warn that stolen source code can be used to find additional vulnerabilities in Accenture's products and client systems. "Source code leaks are particularly dangerous because they give attackers a blueprint of how systems work," said Maria Santos, a cybersecurity analyst at CrowdStrike. "Organizations using Accenture-developed software should be on high alert."

"Source code leaks are particularly dangerous because they give attackers a blueprint of how systems work."

— Maria Santos, CrowdStrike

This breach follows a pattern of high-profile attacks on consulting and IT services firms, which have become prime targets for cybercriminals seeking access to multiple clients through a single compromise.