Nissan Employee Data Breached in Oracle PeopleSoft Hack
Nissan has disclosed a data breach stemming from the recent zero-day campaign targeting Oracle PeopleSoft customers.
According to a data breach notification filed with the California Attorney General, Nissan Americas uses Oracle PeopleSoft to manage employee information, including tax administration, payroll, and other records.
The carmaker recently learned that it was one of the targets of the campaign, which exploited a zero-day vulnerability tracked as CVE-2026-35273.
While Nissan’s investigation is ongoing, the company believes the attackers may have stolen information belonging to current and former employees in the US, Canada, Mexico and Brazil, including SSNs, banking information, and financial and tax data.
The ShinyHunters extortion group is believed to be behind the PeopleSoft campaign, but Nissan is not listed on the cybercriminals’ website at the time of writing.
Nissanis regularly targeted by threat actors. Most recently, the Everest ransomware group claimed in April to have stolen Nissan customer...
Copyright of this story solely belongs to securityweek.com. To see the full text click HERE
