Professional services giant Accenture confirmed a data breach after a hacker claimed the theft of internal source code from the company.
The incident came to light this week, when a threat actor boasted on the hacker forum PwnForums about compromising Accenture and stealing 35 gigabytes of data.
According to the hacker, the information, including Azure access keys and tokens, configuration files, RSA and SSH keys, and source code, was exfiltrated from Accenture earlier this month.
The threat actor, who was trying to sell the allegedly stolen data, posted as proof-of-possession a screenshot depicting a private Azure DevOps repository apparently hosted on an accenture.com domain.
Responding to a SecurityWeek inquiry, Accenture confirmed the attack, but refrained from providing additional details on the matter.
