National Association of Insurance Commissioners

Disclosed Jun 29, 2026Unverified

NAIC says ShinyHunters took public data in PeopleSoft zero-day breach

The NAIC said ShinyHunters exploited Oracle PeopleSoft zero-day CVE-2026-35273 and stole mostly public financial filings, outdated logs and configuration files, denying any PII exposure. The group claimed 3.1 TB including credentials for regulatory systems.

What is known

People affected	Not stated in the sources we have
Disclosed	Jun 29, 2026
Discovered	Jun 11, 2026
Attack	Hacking
Data exposed	Internal documentsCredentials and tokens
Sector	Government · US
Status	Unverified: not yet confirmed by an official notice, a filing or the organization
Part of	Oracle peoplesoft (2026)

Sources

Newsbleepingcomputer.com

NAIC says public data stolen in ShinyHunters' PeopleSoft breach

Notices filed

TotalJun 29

ResearchCount not stated

Same campaign

FBIExtortion exposed names and employment records.ExtortionGovernmentUSUnverifiedSep 22

University of NottinghamNottingham University PeopleSoft breach exposes 454,600 studentsHacking455K affectedEducationGBUnverifiedJun 10

History of this record

Added2026-09-25

First recordedby seedSource

First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.

Everything about National Association of Insurance Commissioners