Accenture confirms breach after hacker steals 35GB of source code and other data

Accenture confirms a cyberattack after threat actor “888” announced the sale of 35 GB of stolen source code and keys to its Azure DevOps repositories.
The hacker claims file includes RSA/SSH keys, Azure PAT, storage access keys, and configurations, although the details have not yet been verified.
Accenture says the breach was resolved with no operational impact; The same actor previously attempted to sell Accenture employee data after a third-party data breach in 2024.

Accenture has confirmed that it suffered a cyberattack, days after threat actors began selling a file supposedly from the company.

“We are aware of this isolated matter and have resolved its origin. There is no impact on Accenture’s operations and service delivery,” Accenture said in a statement to beepcomputer.

It follows a relatively unknown threat actor called 888 who posts a new thread on an underground forum, announcing the sale of a file apparently stolen from the global professional services company.

Accenture Breach

“Today I am selling Accenture Data Breach, thanks for reading and enjoying!” said the hacker. “In July 2026, Accenture suffered a data breach that resulted in the theft of just over 35 GB of company source code.”

The threat actor claims to have captured the source code, RSA keys, SSH keys, Azure Personal Access Tokens (PAT), Azure Storage access keys, and configuration files. They also shared screenshots showing how they closed an Azure DevOps repository, but at this time these claims were not independently verified.

Accenture did not say how much data it lost in the breach or what the nature of the stolen files is. The company also did not explain how it was breached, but emphasized that the hole was already plugged.

According beepcomputerThis same threat actor attempted to sell Accenture employee data after a third-party breach in 2024.

Accenture is one of the world’s largest consulting and professional services firms, providing consulting, technology, managed services and cloud engineering to businesses and governments. It was founded in 1989 as a spin-off of Arthur Andersen’s consulting business and today operates in more than 120 countries with hundreds of thousands of employees.

In 2021 it suffered a ransomware attack at the hands of the infamous LockBit, who also managed to steal data from its systems.