NAIC PeopleSoft Zero-Day Hack by ShinyHunters, Denies Leak

THE National Association of Insurance Commissioners (NAIC) confirmed it was targeted in a recent hacking campaign exploiting a zero-day vulnerability in Oracle PeopleSoft. The attacks, discovered on June 11, were attributed to the ShinyHunters cybercrime group, which claimed to have stolen over 105,000 files from NAIC. Despite initial claims of extensive data theft, including sensitive financial information, NAIC stated that no personally identifiable information or financial accounts were compromised. The group has also claimed attacks on over 100 organizations, with NAIC being the first to publicly acknowledge a breach.