Nissan Discloses Employee Data Breach Linked to Oracle Zero-Day Attacks

Nissan discloses employee data breach linked to Oracle zero-day attacks

Nissan is warning that it suffered a data breach affecting current and former employees after threat actors exploited an Oracle PeopleSoft vulnerability in data theft attacks previously linked to the ShinyHunters extortion group.

Nissan says Oracle PeopleSoft break-in may have spilled payroll records, SSNs

Nissan has joined the growing list of Oracle customers cleaning up after a cyberattack, warning employees that payroll records, bank details, Social Security numbers, and other personal data may have been stolen. In a filing submitted to the California Attorney General on Friday, Nissan Americas said Oracle had informed it of "a cyber event" involving the personnel records of "hundreds of companies." The automaker said it later learned Nissan ha…

Oracle PeopleSoft Supply Chain Compromise: Nissan & 99 Targets

Open the article to view the coverage from satyamrastogi.com

Nissan Employee Data Breached in Oracle PeopleSoft Hack

Only a handful of the 100 organizations targeted in the PeopleSoft campaign have been confirmed. The post Nissan Employee Data Breached in Oracle PeopleSoft Hack appeared first on SecurityWeek.

Nissan data breach: ShinyHunters-linked attack may expose staff records

Nissan has warned current and former employees that their personal data may have been exposed after attackers targeted Oracle PeopleSoft systems. The incident is linked in reports to a wider data theft campaign connected to the ShinyHunters extortion group.

Nissan Confirms Data Breach Following Oracle PeopleSoft 0-Day Attacks

Nissan Americas has officially confirmed a data breach affecting current and former employees across four countries after threat actors exploited a critical zero-day vulnerability in Oracle PeopleSoft software, a campaign attributed to the ShinyHunters extortion group. The attack stems from CVE-2026-35273, a CVSS 9.8-rated unauthenticated Server-Side Request Forgery (SSRF)-to-Remote Code Execution (RCE) vulnerability residing in the Updates Envi…