ShinyHunters Expands Oracle PeopleSoft Exploitation Globally

Did the attackers bypass Oracle's patch?

No. Mandiant says the renewed campaign bypassed web application firewall rules on systems that had not applied Oracle's patch.

Orbitrum Investor Impact

How serious is the PeopleSoft vulnerability?

CVE-2026-35273 has a CVSS 9.8 score and can let an unauthenticated network attacker take over affected PeopleTools 8.61 and 8.62 systems.

Why does the attack matter for Oracle investors?

The campaign increases customer-remediation and reputation risk around PeopleSoft. Oracle says product security vulnerabilities can lead to significant expenses, reduced customer spending, legal claims and regulatory costs.

Could the PeopleSoft attacks affect Oracle stock?

The event could matter if it leads to material remediation expense, customer churn, litigation or regulatory costs. No such financial impact has been disclosed in the sources reviewed.

Are customer data confirmed stolen in the new campaign?

Not according to Mandiant's report. It observed compromised systems and urged victims to investigate possible data theft and prepare for extortion, but did not state that every affected organization suffered confirmed data theft.

What happens next?

Affected organizations need to apply Oracle's patch, investigate compromised systems and rotate accessible credentials. The main unresolved investor issue is whether further victim disclosures produce material costs or liabilities for Oracle.