Accenture confirms breach after hacker steals 35GB of source code and other data

• Accenture confirms cyberattack after threat actor “888” advertised selling 35GB of stolen source code and keys from its Azure DevOps repos
• Hacker claims archive includes RSA/SSH keys, Azure PATs, storage access keys, and configs, though details remain unverified
• Accenture says the breach was remediated with no operational impact; the same actor previously tried selling Accenture employee data after a 2024 third‑party breach

Accenture has confirmed suffering a cyberattack, days after threat actors started selling an archive allegedly coming from the firm.

"We are aware of this isolated matter, and we have remediated its source. There is no impact to Accenture operations and service delivery," Accenture said in a statement to BleepingComputer.

It follows a relatively unknown threat actor called 888 posting a new thread on an underground forum, advertising the sale of an archive seemingly stolen from the global professional services company.

Accenture breach

"Today I am selling the Accenture Data Breach, thanks for reading and enjoy!," the hacker said. "In July 2026, Accenture suffered a data breach which resulted in just over 35gb of source codes getting stolen from the company."

The threat actor claims to have nabbed source code, RSA keys, SSH keys, Azure Personal Access Tokens (PAT), Azure Storage access keys, and configuration files. They also shared screenshots showing how they closed an Azure DevOps repository, but at this time these claims were not independently verified.

Accenture did not say how much data it lost in the breach, or what the nature of the stolen files is. The company also did not explain how it got breached but did stress that the hole has been plugged.

According to BleepingComputer, this same threat actor tried to sell Accenture employee data after a third-party breach back in 2024.

Accenture is one of the world's largest professional services and consulting firms, providing consulting, technology, managed services, and cloud engineering, to businesses and governments. It was founded in 1989 as a spin-off from Arthur Andersen's consulting business, and today operates in more than 120 countries with hundreds of thousands of employees.

In 2021, it suffered a ransomware attack at the hands of the infamous LockBit, who also managed to steal data from its systems.