Englishعربي
Accenture confirmed a security breach in its Azure DevOps environment on July 7, 2026, following claims by a threat actor known as "888" that approximately 35 GB of sensitive data, including source code, RSA and SSH keys, and Azure access tokens, was stolen and offered for sale on a cybercrime forum. While Accenture stated the incident was isolated, the source has been remediated, and there is no operational impact or evidence of customer data compromise, the exposure of cryptographic credentials and internal code raises significant concerns for downstream customers and software supply-chain security. Security experts warn that the stolen data could serve as a roadmap for future attacks, leveraging Accenture's deep access to major enterprise systems worldwide to potentially compromise client environments. The breach underscores ongoing risks to intellectual property and credential integrity in the IT services sector, prompting heightened scrutiny of how development environments are protected against unauthorized access.