Accenture Data Allegedly Listed for Sale on Hacking Forum, 35GB Source Code Claimed Stolen
Published
Key Takeaways
- Forum listing claimed: A threat actor is advertising a dataset allegedly tied to Accenture on a hacking forum, claiming roughly 35GB of company source code was stolen.
- Timing alleged: The listing states the theft occurred in July 2026; Accenture has not publicly confirmed or commented on the claim.
- Sensitive data types: The listing describes the exposed material as source code, RSA keys, SSH keys, and Azure personal access tokens.
An Accenture data breach is advertised on PwnForum by the 888 user, who had previously targeted the multinational IT services and consulting company a few years ago. According to the listing, roughly 35GB of company source code was stolen in July 2026.
As of this writing, the claim has not been independently verified, and Accenture has not issued a public statement confirming or denying the listing.
What the Accenture Forum Listing Claims
If the Accenture data breach is genuine and active, it could be used to access internal development systems or cloud infrastructure. The post says stolen information includes:
- Source code,
- RSA keys,
- SSH keys,
- Azure personal access tokens,
- Azure storage access keys,
- Configuration files.
A visible sample appears to show Azure DevOps repository data and command-line output associated with a private repository, according to Dark Web Informer.
Source code and private keys, if authentic, carry a different risk than personal data, as they could expose proprietary software or provide a foothold into build and cloud environments if not promptly rotated.
No Accenture Confirmation Yet
Organizations and individuals connected to Accenture should watch for an official statement from the company. Until verification occurs, the listing should be treated as an unconfirmed allegation rather than a confirmed breach.
Accenture has previously disputed similar allegations. BreachForums user 888 said that in June 2024, the company suffered a data breach from a third party that exposed 32,826 then-current/former employees. Accenture stated that it contained only three genuine names and email addresses associated with Accenture, with no further indication of compromise.
Accenture has also confirmed real incidents in the past, including a 2021 LockBit ransomware attack in which the group claimed to have stolen 6TB of data.
Related
Get expert insights on threats, breaches, scams, and security trends — delivered every Monday.
Most Popular
Get expert insights on threats, breaches, scams, and security trends — delivered every Monday.
Most Popular