ZeroFox Intelligence Flash Report - Accenture Allegedly Breached

In this Flash Report, ZeroFox researchers report on an alleged breach of Accenture advertised on the dark web by a threat actor known as "888".

Standing Intelligence Requirements

For the most up-to-date list of ZeroFox’s Intelligence Requirements, please visit:

View the full report here

On July 6, 2026, “888”—a prominent threat actor and moderator on the predominantly English-language dark web forum PwnForums—advertised a dataset allegedly stolen from Accenture, an Ireland-based professional services and management consulting company.
The threat actor claims Accenture suffered an intrusion in July 2026 that resulted in the theft of more than 35 GB of source code and related sensitive assets.
As proof of the claimed breach, 888 shared a sample file tree from the allegedly compromised dataset—a common practice used by credible sellers to establish buyer trust ahead of a sale.
No asking price was disclosed; the actor described the dataset as available for a one-time sale and directed interested parties to make contact via their Session handle.
ZeroFox assesses the dataset is likely legitimate based on 888's standing within PwnForums and the specificity of the shared sample, though the breach remains unverified pending confirmation from Accenture or independent validation of the data.