TechJack Solutions

techjacksolutions.com • June 11, 2026

ShinyHunters, a financially motivated extortion group, claims to be actively exploiting a reported vulnerability chain in Oracle PeopleSoft to steal data and demand ransom. The group reports approximately 300 instances across more than 100 organizations compromised; independent verification of this claim is pending. Affected data includes HR records, payroll, finance, and student information. No Oracle patch or official advisory exists as of this report, leaving all unmitigated PeopleSoft deployments at elevated risk while the campaign remains active.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

ShinyHunters Exploits Oracle PeopleSoft Zero-Day Vulnerability A critical zero-day vulnerability (CVE-2026-35273) in Oracle PeopleSoft has been exploited by the ShinyHunters group, leading to breaches of over 100 organizations, primarily in the education sector. The vulnerability allows unauthenticated remote code execution, enabling attackers to compromise systems without prior authentication. The exploitation occurred between May 27 and June 9, 2026, before Oracle's advisory was published on June 10, 2026. Mandiant confirmed that approximately 500,000 student records from the University of Nottingham were among the stolen data. Attackers utilized a 'gadget chain' of vulnerabilities to facilitate the breaches, and the stolen data has been published on the ShinyHunters Data Leak Site. Oracle has issued an urgent advisory recommending immediate patching and mitigation measures, but as of now, no official patch is available. Organizations are advised to restrict internet-facing access to vulnerable systems. 65 sources 77

TechJack Solutions

The full story

Extracted Entities

Attack Types (1)

Platforms (1)