Accenture Data Breach — Hackers Allegedly Claim to Have Stolen 35 GB of Source Code
A threat actor claims to have stolen 35 GB of source code from Accenture, posting samples on a cybercrime forum to prove the breach.
Aditya Raj
July 7, 2026 · 2 min read
A threat actor claims to have stolen 35 GB of source code from Accenture, posting samples on a cybercrime forum. The attacker allegedly gained access via a compromised employee VPN credential and an unpatched vulnerability. Accenture has launched an investigation with law enforcement, and shares dropped 2.3% following the news.
A threat actor has claimed responsibility for a massive data breach at consulting giant Accenture, allegedly stealing 35 GB of source code and internal files from the company's servers.
The alleged breach was disclosed on a prominent cybercrime forum over the weekend, where the attacker posted samples of the stolen data as proof. The samples reportedly include Java and Python source code, configuration files, and internal documentation.
Warning
This is a developing story. Accenture has not yet confirmed the full extent of the breach. Organizations using Accenture software should review their security posture.
"We are aware of the claims and have immediately launched an investigation with the help of leading cybersecurity experts," an Accenture spokesperson said. "Our client-facing systems remain operational, and we are taking all necessary steps to protect our data and our clients' data."
Security researchers who analyzed the leaked samples told Reuters that the data appears authentic and contains proprietary code used in Accenture's internal tooling. The breach, if confirmed in full, would rank among the largest consulting industry data leaks in recent years.
The attacker claims to have gained access through a compromised employee VPN credential, exploiting a known vulnerability in Accenture's identity management system. The company had reportedly been aware of the vulnerability but had not yet deployed a patch.
Accenture shares dropped 2.3% in early trading following the news. The company has notified affected clients and is working with law enforcement agencies, including the FBI, to investigate the incident.
Cybersecurity experts warn that stolen source code can be used to find additional vulnerabilities in Accenture's products and client systems. "Source code leaks are particularly dangerous because they give attackers a blueprint of how systems work," said Maria Santos, a cybersecurity analyst at CrowdStrike. "Organizations using Accenture-developed software should be on high alert."
“Source code leaks are particularly dangerous because they give attackers a blueprint of how systems work.”
— Maria Santos, CrowdStrike
This breach follows a pattern of high-profile attacks on consulting and IT services firms, which have become prime targets for cybercriminals seeking access to multiple clients through a single compromise.
Key Takeaways
- 1 35 GB of alleged Accenture source code stolen and posted on a cybercrime forum.
- 2 Attacker claims entry via compromised VPN credential and unpatched identity management vulnerability.
- 3 Accenture shares fell 2.3% as the company launched an investigation with the FBI.
- 4 Security researchers say the leaked samples appear authentic.
- 5 Source code leaks pose risks of downstream attacks on Accenture's client systems.
Frequently Asked Questions
What data was stolen in the Accenture breach?
The attacker claims to have stolen 35 GB of data including Java and Python source code, configuration files, and internal documentation.
How did the attacker breach Accenture's systems?
According to the threat actor, they gained access through a compromised employee VPN credential by exploiting an unpatched vulnerability in Accenture's identity management system.
Should Accenture clients be concerned?
Yes. Stolen source code could reveal vulnerabilities in Accenture-developed software used by clients. Accenture has notified affected clients and recommends reviewing security posture.
SOURCES
TOPICS
Stay Ahead with TECHRADAR360
Get the latest tech news delivered to your inbox every morning.
Related Articles
FortiBleed Leak Exposes Fortinet VPN Credentials for 73,000 Devices
Another Massive Data Breach Exposed Millions of Driver's License Numbers
