ShinyHunters Cybercriminal Group Expands Malicious Attacks Targeting Oracle's PeopleSoft Software, Google Security Researchers Report

Reuters•Published: Sep 26, 2026 07:36 AM IST

The notorious cybercriminal group known as ShinyHunters has broadened its offensive operations to include targeted attacks against Oracle's PeopleSoft enterprise software. Security researchers at Google have identified this shift in tactics, noting that the group is actively exploiting vulnerabilities to compromise sensitive corporate data. This development marks a significant escalation in the threat landscape for organizations relying on PeopleSoft for human resources and financial management.

Targeted Exploitation: The ShinyHunters group has specifically pivoted its infrastructure to focus on vulnerabilities within the Oracle PeopleSoft ecosystem.
Security Findings: Google's threat intelligence teams uncovered the expansion through ongoing monitoring of malicious actor behaviors and infrastructure patterns.
Data Risks: The attacks pose a severe risk to enterprise data integrity, potentially exposing employee records and sensitive financial information.

The Context & Background

This activity follows a long history of high-profile data breaches attributed to ShinyHunters, which has previously targeted major retail and technology firms. The group is known for stealing large databases and attempting to sell them on dark web forums, making this new focus on enterprise software a concerning evolution for corporate cybersecurity teams.

Why it matters:This expansion highlights the growing danger to enterprise-grade software used by major corporations worldwide. As hackers shift focus toward critical business infrastructure, companies must prioritize patching and rigorous security audits to prevent massive data leaks that could disrupt global operations and compromise employee privacy.

Enjoyed this 2-minute breakdown?

Share it with your colleagues and friends!