Nissan has disclosed that threat actors accessed and stole employee data affecting current and former employees, following exploitation of a vulnerability in Oracle PeopleSoft. Multiple outlets report that the incident is connected to a broader PeopleSoft attack campaign that previously involved extortion activity associated with the ShinyHunters group. The breaches are described as using an Oracle PeopleSoft zero-day, with attackers leveraging the flaw to obtain data.
While the PeopleSoft campaign involved a larger number of organizations, sources note that only a limited set of victims have been publicly confirmed so far. Nissan’s disclosure centers on the impact to individuals employed by the company, rather than the theft of customer or other categories of data. The reporting aligns on the general method—exploitation of the Oracle PeopleSoft vulnerability—and on the broader context linking the attacks to earlier reporting about ShinyHunters-linked activity. Details such as the specific data elements taken, the timeline of compromise, and the extent of exposure are not fully expanded across the provided summaries. The disclosures emphasize the continued fallout from the Oracle zero-day PeopleSoft exploitation campaign and its reach across multiple organizations.
