Oracle Health threat report

ShinyHunters claimed breach of Oracle PeopleSoft servers at over 100 organizations including universities, exfiltrating student records, financial aid data, and administrative information. The group exploited a vulnerability in PeopleSoft to achieve mass compromise; attackers obtained personal data including home addresses, phone numbers, emails, and dates of birth from educational institutions.

• Cybercriminals claim breach of Oracle PeopleSoft servers at 100-(opens in a new tab)
• Hackers say they breached Oracle PeopleSoft systems used by more(opens in a new tab)
• Oracle Emergency Security Update to Fix Critical RCE Vulnerabili(opens in a new tab)
• Oracle Addresses PeopleSoft Vulnerability Amid Reports of Zero-D(opens in a new tab)
• Oracle warns of security bug that hackers abused to breach 100+ (opens in a new tab)
• ShinyHunters Exploits Oracle PeopleSoft Zero-Day (CVE-2026-35273(opens in a new tab)