---
title: 'FBI contractor removed after breach tied to unpatched PeopleSoft flaw'
url: 'https://securteksecurity.com/news/fbi-contractor-removed-after-breach-tied-to-unpatched-peoplesoft-flaw'
markdown: 'https://securteksecurity.com/news/fbi-contractor-removed-after-breach-tied-to-unpatched-peoplesoft-flaw.md'
date: '2026-10-11'
description: "The FBI confirmed a breach affecting thousands of employees after a contractor failed to apply a critical Oracle PeopleSoft patch (CVE-2026-35273), exploited by actors including ShinyHunters. The incident highlights third-party patching risk: Verizon's 2026 breach report notes vulnerability exploit…"
taxonomy:
  category:
    - Breaches
  tag:
    - usa
    - government
---

# [FBI contractor removed after breach tied to unpatched PeopleSoft flaw](https://securteksecurity.com/news/fbi-contractor-removed-after-breach-tied-to-unpatched-peoplesoft-flaw)

   11th Oct 2026   [usa](https://securteksecurity.com/tag:usa#body-wrapper) [government](https://securteksecurity.com/tag:government#body-wrapper)  

The FBI confirmed a breach affecting thousands of employees after a contractor failed to apply a critical Oracle PeopleSoft patch (CVE-2026-35273), exploited by actors including ShinyHunters. The incident highlights third-party patching risk: Verizon's 2026 breach report notes vulnerability exploitation is now the leading initial access vector, with AI compressing disclosure-to-exploitation timelines, and breaches involving third parties up 60 percent.

Sources: [scworld.com](https://www.scworld.com/brief/fbi-contractor-removed-after-data-breach-due-to-unapplied-security-patch)

---

## Navigation

- Parent: [News](https://securteksecurity.com/news.md)
- Previous: [Fancl and Attenir e-commerce breach exposes 785,496 members](https://securteksecurity.com/news/fancl-attenir-e-commerce-breach-785496-members.md)
- Next: [FBI and international partners seize Virtualine bulletproof hosting domain in Operation Omegaline](https://securteksecurity.com/news/fbi-seizes-virtualine-bulletproof-hosting-domain-operation-omegaline.md)