Nissan has confirmed that a cyberattack targeting an Oracle PeopleSoft vulnerability exposed the personal information of some current and former employees.
The company says the breach is linked to a wider hacking campaign that has affected hundreds of organizations around the world.
According to Nissan, attackers exploited a critical zero-day flaw in Oracle PeopleSoft, software used to manage employee payroll, tax records, and other HR information. Oracle later informed the company that it had been specifically targeted during the large-scale attack.
The incident is believed to impact current and former Nissan employees in the United States, Canada, Mexico, and Brazil. While the investigation is still ongoing, the company warns that exposed information could include employee records stored in its Oracle PeopleSoft system. Some reports suggest the stolen data may include names, contact details, payroll information, banking details, tax records, and government identification numbers.
Security researchers have linked the attacks to the ShinyHunters extortion group, which has been exploiting the Oracle PeopleSoft vulnerability tracked as CVE-2026-35273. The flaw allowed attackers to gain unauthorized access to vulnerable systems before Oracle released emergency mitigations. More than 100 organizations are believed to have been affected by the campaign.
After discovering the breach, Nissan activated its incident response process, secured the affected systems, hired external cybersecurity experts, and began working with Oracle to investigate the attack. The company is also notifying affected employees and continuing to assess the full scope of the incident.
The breach highlights the growing risks facing organizations that rely on enterprise software to manage sensitive employee information. Security experts recommend applying Oracle’s latest security updates immediately, reviewing systems for signs of compromise, and monitoring sensitive accounts for unusual activity.





