Cybercriminals claim breach of Oracle PeopleSoft servers at 100-plus organizations

A notorious cybercrime collective known as ShinyHunters has claimed responsibility for breaching Oracle PeopleSoft servers at more than 100 organizations, including numerous universities. This revelation was communicated to TechCrunch by a member of the group on Wednesday, following initial reports by BleepingComputer. PeopleSoft, a widely used enterprise software solution, facilitates the management of payroll, human resources, and various administrative functions. The latest breach highlights ShinyHunters' ongoing trend of executing large-scale hacks, solidifying their reputation as one of the most active cybercriminal groups in recent times. According to a message attributed to the hackers, sensitive information including student records, home addresses, phone numbers, emails, and dates of birth has been extracted from the compromised systems. Alarmingly, many of the educational institutions affected had previously been targets of unrelated cyberattacks. Interestingly, the group's initial objective was to breach an FBI PeopleSoft server, intending to issue a statement refuting allegations that ShinyHunters was involved in a series of swatting incidents flagged by the FBI in a recent alert. However, this attempt reportedly did not succeed. Oracle has yet to respond to inquiries regarding the incident.