2026 Accenture — confirmed isolated breach; forum actor offered ~35GB source code
Data compromised
Forum-claimed ~35GB bundle described as source code, RSA keys, SSH keys, Azure personal access tokens, Azure storage access keys, and configuration files; visible sample allegedly shows Azure DevOps repository data—unverified
Technical writeup
Verified security incident — confirmed July 7, 2026. After forum actor "888" advertised a July 2026 sale of roughly 35GB of data described as Accenture source code, RSA/SSH keys, Azure PATs, Azure storage keys, and configuration files, Accenture told BleepingComputer: "We are aware of this isolated matter, and we have remediated its source. There is no impact to Accenture operations and service delivery." Accenture did not confirm data types, volume, customer impact, or initial access vector at publication time. BleepingComputer could not independently verify full exfiltration scope. Distinct from Accenture's August 2021 LockBit incident. BreachHistory retains recordsAffected 0 because no individual headcount was attested.
Root cause
Confirmed isolated security incident after threat actor "888" advertised ~35GB source code and cloud credentials on a criminal forum; Accenture remediated source per BleepingComputer