BreachPublished 29 Jun 2026

Nissan discloses employee data breach linked to Oracle zero-day attacks

Source Bleeping Computer

Mentions 1 CVE

Mentioned vulnerabilities

CVE-2026-35273

Description

Nissan is warning that it suffered a data breach affecting current and former employees after threat actors exploited an Oracle PeopleSoft vulnerability in data theft attacks previously linked to the ShinyHunters extortion group. [...]

Impact

The breach exposed sensitive personal information of current and former Nissan employees, including contact details, banking information, Social Security and national identification numbers, financial and tax data, and dependent and beneficiary information. This exposure increases the risk of identity theft, financial fraud, and privacy violations for affected individuals. The breach affects employees in the United States, Canada, Mexico, and Brazil. The incident also highlights the risk posed by zero-day vulnerabilities in widely used enterprise software and the potential for extortion groups to leverage such exploits for data theft and ransom demands.

Defensive guidance

Nissan has secured affected systems, restricted access to sensitive payroll functions to secured environments, and implemented additional identity verification measures. Affected individuals are being offered credit and dark web monitoring services where available. Organizations using Oracle PeopleSoft should apply Oracle's emergency mitigations immediately and monitor vendor advisories for official patches. Incident response and forensic investigations should be conducted to assess and contain breaches. No contradictory vendor guidance indicating 'no action required' is present.

References

bleepingcomputer.com/news/security/nissan-discloses-employee-data-breach-linked-to-oracle-zero-day-attacks/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 29 Jun 2026, 20:51 UTC

References

Community reviews

Related threats