Accenture Contractor Removed By FBI After Oracle PeopleSoft Breach Exposed Employee Data

The FBI removed an Accenture contractor following a data breach that exposed sensitive personal information of thousands of bureau employees. The incident, which has shaken the agency, is still being evaluated for the full extent of the damage, with some former officials calling it a significant setback to the organization's operational security.

The breach occurred due to a failure to apply a security patch to a third-party-managed platform, as confirmed by a senior FBI official to Reuters. FBI cyber chief Brett Leatherman stated that the agency had removed the contractor and taken all necessary measures to minimize further risk and protect its workforce.

While the FBI did not disclose the name of the affected platform or the third-party organization, it is believed that the system in question was Oracle's PeopleSoft, a commonly used human resources platform. The hacking group ShinyHunters claimed responsibility for exploiting the platform to gain access to the FBI's job site last month.

Accenture, the managing third-party organization, has not provided information on the specific contractor involved or their current employment status. Oracle has yet to comment on the matter, while Accenture expressed pride in supporting the FBI's mission without elaborating on the contractor or the alleged patching failure.

The breach has raised serious concerns within the FBI and the broader intelligence community, considering the sensitive data compromised. The exposed information included detailed descriptions of named employees' counterintelligence roles, the physical addresses of human intelligence operatives, and medical and psychiatric records of bureau workers.