Accenture confirms breach after hacker steals 35GB of source code and other data

Accenture Confirms Cyber Attack After Threat Actor “888” Advertised To Sell 35GB Of Stolen Source Code And Keys From Its Azure DevOps Repos
Hacker claims archive includes RSA/SSH keys, Azure PATs, storage access keys and configurations, though details remain unconfirmed
Accenture says the breach was remedied without any operational impact; the same actor previously tried to sell Accenture employee data after a third-party breach in 2024

Accenture has confirmed it suffered a cyber attack just days after threat actors began selling an archive purported to be from the company.

“We are aware of this isolated matter and have remedied its source. There is no impact on Accenture’s operations and service delivery,” Accenture said in a statement to Bleeping Computer.

It follows a relatively unknown threat actor called 888 posting a new thread on an underground forum advertising the sale of an archive apparently stolen from the global professional services firm.

Accenture Fraud

“Today I’m selling the Accenture Data Breach, thanks for reading and enjoy!” said the hacker. “In July 2026, Accenture suffered a data breach that resulted in just over 35 GB of source code being stolen from the company.”

The threat actor claims to have nabbed source code, RSA keys, SSH keys, Azure Personal Access Tokens (PAT), Azure Storage access keys, and configuration files. They also shared screenshots showing how they shut down an Azure DevOps repository, but at this point those claims have not been independently verified.

Accenture did not say how much data it lost in the breach or what the nature of the stolen files are. The company also did not explain how it was breached, but emphasized that the hole has been plugged.

According to Bleeping Computerthe same threat actor attempted to sell Accenture employee data following a third-party breach back in 2024.

Accenture is one of the world’s largest professional services and consulting firms, providing consulting, technology, managed services and cloud engineering to businesses and governments. It was founded in 1989 as a spin-off from Arthur Andersen’s consulting business, and today operates in more than 120 countries with hundreds of thousands of employees.

In 2021, it was hit by a ransomware attack at the hands of the infamous LockBit, which also managed to steal data from its systems.