A zero-day vulnerability identified as CVE-2026-35273 in Oracle PeopleSoft was exploited in a widespread campaign targeting over 100 organizations, including Nissan Americas. This campaign, attributed to the ShinyHunters extortion group, led to unauthorized access and potential theft of sensitive employee data such as social security numbers, banking, financial, and tax information. Nissan uses Oracle PeopleSoft for employee management and confirmed the breach via a notification to the California Attorney General. The attack affected multiple countries in North and South America. While other victims include educational institutions and insurance organizations, Nissan is not currently listed on the attackers' victim site. No official patch or remediation guidance has been disclosed.

The breach potentially exposed sensitive personal and financial information of Nissan employees and former employees across multiple countries (US, Canada, Mexico, Brazil). This exposure increases the risk of identity theft, financial fraud, and privacy violations. The campaign also targeted numerous other organizations, indicating a broad impact on Oracle PeopleSoft customers. The involvement of a known extortion group suggests a risk of data being used for extortion or further criminal activity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Organizations using Oracle PeopleSoft should monitor official Oracle communications for patches addressing CVE-2026-35273. Until a patch is available, consider applying any recommended temporary mitigations from Oracle. Review access logs and audit trails for suspicious activity related to PeopleSoft systems. Coordinate with legal and compliance teams regarding breach notifications and regulatory requirements.