IT services giant Accenture has confirmed it suffered a security breach after a threat actor claimed to have stolen sensitive company data, including source code and other internal information.
The threat actor claims to have stolen a range of data totaling approximately 35GB, although Accenture has stated that the incident has been contained and has not affected its operations or service delivery.
This lack of disruption is notable, however, as it reflects a broader shift in how cybercriminals target organizations. Rather than relying solely on attacks designed to disrupt operations, threat actors are increasingly focusing on stealing valuable digital assets, including source code and technical information.
Accenture Breach Allegedly Involves Source Code and Sensitive Credentials
The breach came to light after a threat actor known as “888” claimed to have obtained data and attempted to sell it on a cybercrime forum.
According to the claims, the stolen information includes source code, configuration files, and various types of access credentials, including Azure personal access tokens, SSH keys, RSA keys, and Azure Storage access keys. Accenture has confirmed that a breach occurred but has not verified the amount or specific categories of data allegedly taken.
The company has not disclosed how attackers gained access or whether customer information was affected. However, the alleged theft of source code and credentials highlights the type of sensitive technical information now being targeted by cybercriminals.
The incident is not the first time Accenture has faced cybercriminal attention. The company previously suffered a ransomware attack in 2021 after the LockBit ransomware group claimed responsibility for stealing data from its systems. However, the latest incident appears to represent a different type of attack, with the focus reportedly placed on obtaining sensitive technical information.
Why Source Code and Credentials Have Become Cybercriminal Targets
The Accenture breach highlights a broader trend in the cyber threat landscape, where attackers are increasingly targeting the underlying assets that power modern businesses. Source code, cloud credentials, and development environments can provide valuable insight into how organizations build, operate, and secure their technology.
