Accenture confirms breach after hacker steals 35GB of source code and other data

Accenture confirms cyberattack after malicious actor ‘888’ announces sale of 35 GB of source code and stolen keys from its Azure DevOps repositories
Records of the hackers’ claims include RSA/SSH keys, Azure PAT, storage access keys, and configurations, although the details remain unverified.
Accenture says the flaw was fixed with no operational impact; the same actor previously tried to sell Accenture employee data after a third-party breach in 2024

Accenture has confirmed it suffered a cyberattack, days after malicious actors began selling records purportedly from the company.

“We are aware of this isolated issue and have addressed its source. There is no impact on Accenture’s operations and service delivery,” Accenture said in a statement to BeepComputer.

It involves a relatively unknown threat actor called 888 who posts a new thread on an underground forum, announcing the sale of apparently stolen archives to the global professional services company.

Emphasis gap

“Today I’m selling Accenture Data Breach, thanks for reading and enjoy!” the hacker said. “In July 2026, Accenture suffered a data breach that resulted in the theft of just over 35 GB of source code from across the company.”

The threat actor claims to have collected source code, RSA keys, SSH keys, Azure Personal Access Tokens (PATs), Azure storage access keys, and configuration files. They also shared screenshots showing how they closed an Azure DevOps repository, but at this time these claims have not been independently verified.

Accenture did not specify how much data was lost in the breach or the nature of the files stolen. The company also did not explain how it was hacked, but emphasized that the hole had been plugged.

According to BeepComputerthis same bad actor attempted to sell Accenture employee data after a third-party breach in 2024.

Accenture is one of the world’s largest professional services and consulting companies, providing consulting, technology, managed services and cloud engineering services to businesses and governments. It was founded in 1989 as a spin-off from Arthur Andersen’s consulting business and today operates in more than 120 countries with hundreds of thousands of employees.

In 2021, it suffered a ransomware attack from the infamous LockBit, which also managed to steal data from its systems.