Nissan Confirms Data Breach Following Oracle PeopleSoft 0

Cybersecuritynews •Guru Baran • June 30, 2026

Nissan Americas has officially confirmed a data breach affecting current and former employees across four countries after threat actors exploited a critical zero-day vulnerability in Oracle PeopleSoft software, a campaign attributed to the ShinyHunters extortion group. The attack stems from CVE-2026-35273, a CVSS 9.8-rated unauthenticated Server-Side Request Forgery (SSRF)-to-Remote Code Execution (RCE) vulnerability residing in […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Nissan Data Breach Exposes Employee Records via Oracle Vulnerability Nissan disclosed a data breach affecting current and former employees after attackers exploited a critical vulnerability in Oracle PeopleSoft, specifically CVE-2026-35273. This breach potentially exposed sensitive information, including Social Security numbers, banking details, and payroll records, impacting employees in the U.S., Canada, Mexico, and Brazil. The ShinyHunters extortion group is believed to be behind the attack, which affected hundreds of organizations globally. Nissan activated its incident response plan, engaged cybersecurity experts, and is collaborating with Oracle to mitigate the issue. The company is offering credit and dark web monitoring services to affected individuals. As of now, Nissan has not disclosed the total number of impacted employees or the specific timeline of the breach. 11 sources 70

Extracted Entities

Nissan Confirms Data Breach Following Oracle PeopleSoft 0

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (1)

CWE Weaknesses (1)

Platforms (1)