Accenture Confirms Data Breach After Hacker Claims Source Code Theft

The professional services giant says it contained the incident, remediated its source, and experienced no operational or service delivery impact. The post Accenture Confirms Data Breach After Hacker Claims Source Code Theft appeared first on SecurityWeek .

Reported facts: Accenture has confirmed a data breach after a threat actor claimed to have stolen roughly 35 GB of internal source code, along with Azure access keys and tokens, RSA and SSH keys, and configuration files, although the company says the incident is isolated, remediated at its source, and without impact to operations or service delivery.[1][4][6] The attacker is advertising or selling the alleged trove, which includes cloud credentials and other sensitive artifacts that could affect clients or downstream systems.[3][4][7] RealGround analysis: Compromise of source code and cloud keys represents a significant data leakage and AI supply chain risk, as exposed repositories, secrets, or dev tooling may contain AI models, pipelines, or integrations that can be abused for lateral movement or code-level attacks. Organizations relying on Accenture-built solutions should reassess key rotation, SBOM coverage, and secret management, and use AI Supply Chain & SBOM Advisory to map which AI or software assets could be affected, validate dependency integrity, and implement stronger controls around code provenance and credential hygiene.