Accenture confirms security breach after hacker claims theft of 35GB of internal data

Accenture has confirmed a security breach after a hacker claimed to have stolen 35 GB of data including source code, encryption keys, and cloud infrastructure credentials with potential healthcare client implications.

MRAdmin
By
2 Min Read

Accenture, one of the world’s largest consulting firms with extensive healthcare client relationships, has confirmed a security breach after a hacker claimed to have stolen 35 GB of highly sensitive data including source code, encryption keys, and cloud infrastructure access credentials.

The Intrusion

On July 6, 2026, a cybercriminal operating under the handle “888” posted on a cybercrime forum claiming to have breached Accenture’s systems and exfiltrated 35 GB of data. The data allegedly includes source code, RSA keys, SSH keys, Azure Personal Access Tokens (PATs), Azure Storage access keys, and configuration files. The hacker offered the data for sale, requesting payment in Monero cryptocurrency and posting a screenshot as proof of the theft.

Accenture confirmed the intrusion, stating that it identified the source and remediated the incident, assuring that it had no impact on the company’s financial position or operations. However, Accenture has not confirmed the full veracity of the hacker’s claims.

Healthcare Sector Implications

Accenture provides professional services to numerous Fortune 500 companies, including many healthcare organizations, helping them with technology implementation, cloud migrations, and managed services. If the stolen data includes client credentials or access keys, healthcare organizations relying on Accenture’s infrastructure could face significant supply chain risk.

This is not the first time hacker “888” has attempted to sell data allegedly stolen from Accenture. In 2024, the same hacker claimed to be selling the personally identifiable information of more than 30,000 employees, though Accenture said at the time that the claims were vastly exaggerated.

Risk Assessment

While the current claims may also be exaggerated, the nature of the alleged stolen data – encryption keys, access tokens, and infrastructure credentials – makes this incident particularly concerning for Accenture’s healthcare clients. If validated, the breach could enable downstream attacks on healthcare providers using Accenture-managed systems and cloud environments.

Share This Article
Leave a Comment

Leave a Reply

Your email address will not be published. Required fields are marked *