Over 100 organizations, primarily colleges and universities, may have been compromised by the cybercrime group ShinyHunters between May 27 and June 9. The group reportedly gained access to the Oracle PeopleSoft software suite, which handles human resources and financial management for these institutions, according to a blog post from Mandiant and the Google Threat Intelligence Group.
Approximately 68 percent of the affected organizations are based in the United States. Following the incident, Oracle issued a security alert on June 10 but did not confirm specific breaches among its users. The University of Nottingham in England acknowledged its involvement in the data breach and is currently assessing which data may have been accessed.
The blog post indicated that while some institutions managed to mitigate the risks and prevent unauthorized access, others faced significant compromises, resulting in data being published on the ShinyHunters Dark Web site.