Security · 1h ago
ShinyHunters steals 3.1TB from NAIC in Oracle zero-day attack
The National Association of Insurance Commissioners confirmed a data breach after ShinyHunters claimed to have stolen 3.1TB of data. The attackers exploited an Oracle zero-day vulnerability in a supply chain attack, accessing insurer filings and customer orders. The breach highlights ongoing risks from zero-day exploits targeting critical infrastructure.
Meridian48 take
The scale of data stolen underscores how supply chain attacks can amplify damage, but the reliance on a single vendor's zero-day fix is a broader industry concern.
Read the full reporting
NAIC confirms data breach with ShinyHunters claiming 3.1TB of data stolen in Oracle zero-day attack →
TechRadar
data-breachzero-day