Snapshot from Jul 20, 2026 at 07:00 UTC. For live data and tracking: View Live
Events / Accidents / Nissan Data Breach via Oracle PeopleSoft
Accidents data breach

Nissan Data Breach via Oracle PeopleSoft

Analysis based on 8 articles · First reported Jun 30, 2026 · Last updated Jun 30, 2026

Sentiment
-70
Attention
6
Articles
8
Market Impact
General
Live prominence charts, article sentiment distribution, and event development timeline available on the Ergen Dashboard
Market Impact

The data breach at Nissan, caused by a zero-day exploit in Oracle Corporation Oracle Corporation — PeopleSoft, is likely to negatively impact Nissan's stock price due to reputational damage and potential costs associated with remediation and legal liabilities. Oracle Corporation may also face scrutiny and a decline in confidence in its enterprise software security, potentially affecting its market valuation.

Automotive Software Cybersecurity
Event Summary

Nissan has disclosed a data breach affecting current and former employees in the United States, Canada, Mexico, and Brazil. The breach occurred between May 27 and June 9, 2026, when the ShinyHunters extortion group exploited CVE-2026-35273, a critical zero-day vulnerability in Oracle Corporation's Oracle Corporation — PeopleSoft software. This flaw, an unauthenticated Server-Side Request Forgery (SSRF)-to-Remote Code Execution (RCE) bug, allowed attackers to access sensitive personal data, including Social Security numbers, banking details, financial and tax information, and dependent/beneficiary records. Oracle Corporation issued an out-of-band security patch after the attacks began. Nissan has activated its incident response, engaged cybersecurity experts, secured affected systems, and is offering free credit and dark web monitoring services to affected individuals. The company has also implemented stricter payroll access controls as a precautionary measure.

Key Actions
100 ShinyHunters exploited vulnerability Oracle Corporation — PeopleSoft
100 ShinyHunters stole data Nissan
70 Oracle Corporation issued security advisory
60 Nissan restricted payroll access
50 Nissan offered credit monitoring
Entities Involved
stock
Nissan
Nissan experienced a significant data breach affecting current and former employees across four countries due to a zero-day vulnerability in Oracle Corporation Oracle Corporation — PeopleSoft software. This incident has exposed sensitive personal data, leading to reputational damage and potential financial liabilities.
Importance 100.0 Sentiment -70.0
mil
ShinyHunters
ShinyHunters, an extortion group, claimed responsibility for exploiting the Oracle Corporation Oracle Corporation — PeopleSoft zero-day vulnerability, breaching over 300 Oracle Corporation — PeopleSoft instances across 100 organizations, including Nissan. This group is the primary perpetrator of the data theft.
Importance 90.0 Sentiment 80.0
stock
Oracle Corporation
Oracle Corporation's Oracle Corporation — PeopleSoft software contained a critical zero-day vulnerability (CVE-2026-35273) that was exploited by threat actors, leading to data breaches at hundreds of organizations, including Nissan. This reflects negatively on Oracle Corporation's software security and its ability to protect customer data.
Importance 80.0 Sentiment -50.0
subs
Oracle Corporation — PeopleSoft
Oracle Corporation — PeopleSoft, an enterprise software used by Nissan for payroll and HR, was the target of a zero-day exploit (CVE-2026-35273) that allowed attackers to access sensitive employee data. This event highlights a significant security flaw in the software.
Importance 70.0 Sentiment -50.0
cnt
Mexico
Current and former Nissan employees in Mexico were among those affected by the data breach, with their personal information potentially exposed.
Importance 30.0 Sentiment 0.0
cnt
Brazil
Current and former Nissan employees in Brazil were among those affected by the data breach, with their personal information potentially exposed.
Importance 30.0 Sentiment 0.0
cnt
United States
Current and former Nissan employees in the United States were among those affected by the data breach, with their personal information potentially exposed.
Importance 30.0 Sentiment 0.0
cnt
Canada
Current and former Nissan employees in Canada were among those affected by the data breach, with their personal information potentially exposed.
Importance 30.0 Sentiment 0.0
subs
Google — Mandiant
Google — Mandiant confirmed the exploitation of the Oracle Corporation Oracle Corporation — PeopleSoft flaw as a zero-day and attributed the campaign to UNC6240 (ShinyHunters), providing analysis and mitigation recommendations.
Importance 20.0 Sentiment 10.0
stock
Metasploit
Metasploit recommended mitigations for the Oracle Corporation Oracle Corporation — PeopleSoft vulnerability, assisting organizations in securing their systems.
Importance 10.0 Sentiment 10.0
govactor
United States — Cybersecurity and Infrastructure Security Agency
United States — Cybersecurity and Infrastructure Security Agency added the Oracle Corporation Oracle Corporation — PeopleSoft vulnerability (CVE-2026-35273) to its Known Exploited Vulnerabilities (KEV) catalog, highlighting its critical nature and the need for immediate patching.
Importance 10.0 Sentiment 0.0
stock
Alphabet Inc.
Alphabet Inc.'s Threat Intelligence Group (GTIG) attributed the campaign to UNC6240 (ShinyHunters), contributing to the understanding of the attack.
Importance 10.0 Sentiment 0.0
Relationships
Nissan related ↔ Oracle Corporation
Nissan related ↔ United States
Oracle Corporation related ↔ Mexico
Oracle Corporation related ↔ Brazil
Oracle Corporation related ↔ United States
Oracle Corporation related ↔ Canada
Mexico related ↔ Brazil
Mexico related ↔ United States
Mexico trade partners ↔ Canada Mexico maintains a major economic partnership with Canada, anchored by their mutual participation in the USMCA. The coun
Brazil related ↔ United States
Brazil related ↔ Canada
United States strained-ally ↔ Canada The United States has severely strained its historically close relationship with Canada by imposing sweeping tariffs and
ERGEN INTELLIGENCE
Track this event live

Set up alerts, explore entity relationships, search across thousands of events, and build custom intelligence feeds.

Open Dashboard

About Ergen

Ergen is a news intelligence platform that converts raw news articles into structured data. It tracks events, entities, and the relationships between them, with sentiment and attention metrics derived from thousands of articles. Pages on this site are daily static snapshots from the platform's live database. For real-time tracking, search, and alerts, the full dashboard is at app.ergen.ai.