Accenture disputed a BreachForums claim of 32,000 leaked employee records

Organization
Accenture
Exploit
Hacking
Industry
Professional Services

On 19 June 2024 a BreachForums user going by the handle 888 posted a file that the poster said held contact and personal details for 32,826 current and former Accenture employees. The fields on offer were limited: full names, email addresses and what the listing described as broadcast dates. No passwords were included.

The poster said the records had come from a third party rather than from Accenture's own network. Cyber Daily, which reported the listing on 20 June, described 888 as a prolific leaker who had claimed responsibility for a series of corporate data postings, including sets attributed to other large multinationals.

Accenture rejected the claim the following day. "We have analysed the data set published by the threat actor and found only three names and Accenture email addresses, but no other information related to Accenture," the company said, adding that it had found no indication of compromise to its systems or to those of its clients.

The larger figure was never independently corroborated, and Accenture did not revise its account. As of late June 2024 the company's denial was the only formal statement on the record, and the discrepancy between the advertised record count and the verified contents remained unresolved in public.

Sources