{ "id": "43820baf-8980-47e2-a73b-93346cf125ff", "created_at": "2026-04-06T00:16:25.132321Z", "updated_at": "2026-04-10T13:12:08.611649Z", "deleted_at": null, "sha1_hash": "1153292601f59b8a49079b138c1e26ae0eca2f80", "title": "Accenture confirms hack after LockBit ransomware data leak threats", "llm_title": "", "authors": "", "file_creation_date": "0001-01-01T00:00:00Z", "file_modification_date": "0001-01-01T00:00:00Z", "file_size": 1874021, "plain_text": "Accenture confirms hack after LockBit ransomware data leak threats\r\nBy Ax Sharma\r\nPublished: 2021-08-11 · Archived: 2026-04-05 23:44:57 UTC\r\nAccenture, a global IT consultancy giant has allegedly been hit by a ransomware cyberattack from the LockBit ransomware\r\ngang.\r\nAccenture is an IT giant known to serve a wide range of industries including automobiles, banks, government, technology,\r\nenergy, telecoms, and many more.\r\nValued at $44.3 billion, Accenture is one of the world's largest tech consultancy firms employing around 569,000 employees\r\nacross 50 countries.\r\nhttps://www.bleepingcomputer.com/news/security/accenture-confirms-hack-after-lockbit-ransomware-data-leak-threats/\r\nPage 1 of 4\n\n0:00\r\nhttps://www.bleepingcomputer.com/news/security/accenture-confirms-hack-after-lockbit-ransomware-data-leak-threats/\r\nPage 2 of 4\n\nVisit Advertiser websiteGO TO PAGE\r\nRansomware group threatening to leak stolen data\r\nA ransomware group known as LockBit 2.0 is threatening to publish files data allegedly stolen from Accenture during a\r\nrecent cyberattack.\r\nThe threat actors state that they will publish the data later today if a ransom is not paid, as seen by BleepingComputer:\r\nLockBit ransomware operator leak site has a countdown to leak\r\nWhile LockBit has not shown proof of the stolen data, they claim to be willing to sell it to any interested parties.\r\n\"These people are beyond privacy and security. I really hope that their services are better than what I saw as an insider. If\r\nyou're interested in buying some databases reach us,\" states LockBit on their data leak site.\r\nThe exact details as to when the breach occurred, when was it detected, its scope or, the technical cause of exploitation are\r\nyet to be known.\r\nAccenture told BleepingComputer that affected systems had been recovered from a backup:\r\n\"Through our security controls and protocols, we identified irregular activity in one of our environments. We immediately\r\ncontained the matter and isolated the affected servers.\"\r\n\"We fully restored our affected systems from back-up. There was no impact on Accenture’s operations, or on our\r\nclients' systems,\" Accenture told BleepingComputer.\r\n6 TB of files stolen, $50 million ransom demand\r\nIn conversations seen by the Cyble research team, the LockBit ransomware gang claims to have stolen six terabytes of data\r\nfrom Accenture and are demanding a $50 million ransom.\r\nThe threat actors claim to have gotten access to Accenture's network via a corporate \"insider.\"\r\nhttps://www.bleepingcomputer.com/news/security/accenture-confirms-hack-after-lockbit-ransomware-data-leak-threats/\r\nPage 3 of 4\n\nSources familiar with the attack have told BleepingComputer that Accenture had confirmed the ransomware attack to at least\r\none CTI vendor, and the IT services provider is also in the process of notifying more customers.\r\nAdditionally, cybercrime intelligence firm Hudson Rock shared that Accenture had 2,500 compromised computers\r\nbelonging to employees and partners:\r\nThe recent Accenture Ransomware:\r\nAccenture has 2,500 compromised computers of employees and partners, this information was certainly used by\r\nthreat actors.\r\nWatch how a compromised employee's computer looks like in Cavalier -https://t.co/JHI48vyDgf\r\n— Hudson Rock (@HRock) August 11, 2021\r\nLockBit has previously hit many victims, including UK's Merseyrail train network.\r\nEarlier this week, the Australian government had warned of escalating LockBit 2.0 ransomware attacks, after the group was\r\nseen actively recruiting insiders at companies they plan on breaching, in exchange for millions of dollars in rewards.\r\nEdit 12:40 PM ET: BleepingComputer had reached out to Accenture well in advance of publishing but received a quote after\r\npress time which has been added with proper attribution.\r\nAutomated Pentesting Covers Only 1 of 6 Surfaces.\r\nAutomated pentesting proves the path exists. BAS proves whether your controls stop it. Most teams run one without the\r\nother.\r\nThis whitepaper maps six validation surfaces, shows where coverage ends, and provides practitioners with three diagnostic\r\nquestions for any tool evaluation.\r\nSource: https://www.bleepingcomputer.com/news/security/accenture-confirms-hack-after-lockbit-ransomware-data-leak-threats/\r\nhttps://www.bleepingcomputer.com/news/security/accenture-confirms-hack-after-lockbit-ransomware-data-leak-threats/\r\nPage 4 of 4", "extraction_quality": 1, "language": "EN", "sources": [ "ETDA" ], "origins": [ "web" ], "references": [ "https://www.bleepingcomputer.com/news/security/accenture-confirms-hack-after-lockbit-ransomware-data-leak-threats/" ], "report_names": [ "accenture-confirms-hack-after-lockbit-ransomware-data-leak-threats" ], "threat_actors": [], "ts_created_at": 1775434585, "ts_updated_at": 1775826728, "ts_creation_date": 0, "ts_modification_date": 0, "files": { "pdf": "https://archive.orkl.eu/1153292601f59b8a49079b138c1e26ae0eca2f80.pdf", "text": "https://archive.orkl.eu/1153292601f59b8a49079b138c1e26ae0eca2f80.txt", "img": "https://archive.orkl.eu/1153292601f59b8a49079b138c1e26ae0eca2f80.jpg" } }