At a glance: Accenture confirms a security incident involving theft of an estimated 35 gigabytes of data, but provides no further details on scope or attack vector.
The consulting and IT services company Accenture has acknowledged a security incident after a cybercriminal allegedly offered stolen company data for sale on an underground forum. The company characterises the incident as an isolated case with no impact on business operations.
Accenture confirmed to the tech publication Bleeping Computer a security incident and assured that the cause had already been remediated. Business operations and customer services were not impacted. However, the company provided no concrete information regarding the volume of stolen data, the inclusion of customer data, or the attack vector.
According to the attacker using the username “888”, the data was obtained in July 2026 and comprised approximately 35 gigabytes. The cybercriminal claims to have accessed source code repositories, RSA and SSH keys, Microsoft Azure access tokens, Azure storage keys and configuration files. As proof, the user published a screenshot allegedly documenting the cloning of an Azure DevOps repository named “121123_AtriasTalentAcademy”; the hostname under accenture.com was redacted.
Bleeping Computer was unable to independently verify the attacker’s claims. The lack of detailed information from Accenture regarding attack vector, data categories and customer involvement complicates a comprehensive risk assessment for affected organisations.
Source: www.it-daily.net · Published 8 July 2026
Lumi AI News — AI-assisted curation in accordance with Article 50 EU AI Act. Paraphrasing and classification by Lumi News Pipeline v1.7.3.