Story perspectives

ShinyHunters Resumes PeopleSoft Attacks, FBI Investigates Data Breach

By Drooid · Sep 26, 2026, 2:41 PM UTC · How we work

Summary

Story summary

Mandiant reported that ShinyHunters renewed mass exploitation of Oracle PeopleSoft.
The group exploited a PeopleSoft bug from May 27 through June 9, mainly targeting universities.
ShinyHunters bypassed web-application firewalls but avoided systems that installed Oracle’s patch.
The attacks struck dozens of systems worldwide across education, technology, healthcare, agriculture, transportation and government.
ShinyHunters claimed access to FBI personnel data, including medical and psychiatric records, prompting an FBI investigation.

1 of 1

Story summary

Mandiant reported that ShinyHunters renewed mass exploitation of Oracle PeopleSoft.
The group exploited a PeopleSoft bug from May 27 through June 9, mainly targeting universities.
ShinyHunters bypassed web-application firewalls but avoided systems that installed Oracle’s patch.
The attacks struck dozens of systems worldwide across education, technology, healthcare, agriculture, transportation and government.
ShinyHunters claimed access to FBI personnel data, including medical and psychiatric records, prompting an FBI investigation.