Back to overview
Confidence MediumJun 9, 2026nissan-global.com

Nissan Employee Data Breach Linked to Oracle PeopleSoft Zero-Day

PatternExternal actor · Hacking · Confidentiality impact

Nissan disclosed an employee data breach linked to the exploitation of the Oracle PeopleSoft CVE-2026-35273 vulnerability as a zero-day. The attacks, primarily impacting organizations in the education sector, occurred between May 27 and June 9, 2026.

Signal date
Jun 9, 2026
Updated
Jun 29, 2026
Confidence
Medium
Sources
1 source
nissan-global.com logo

Nissan Global

Sector
Educational Services
Signals
1 linked

Signal context

First seen: Jun 9, 2026

Last updated: Jun 29, 2026

Status: Public signal

Key points

  • Employee data breach.
  • Linked to Oracle PeopleSoft CVE-2026-35273 zero-day exploitation.
  • Attack window between May 27 and June 9, 2026.

Signal analysis

Beta

This analysis groups the signal by industry, likely incident action and impacted security area. It helps compare this signal with other published signals without treating the labels as final determinations.

Affected organization
Nissan Global logo
Nissan Global

Sector: Educational Services

Likely country: Location not provided

Estimated
Threat source
Hacking activity

The feed marks multiple actor roles. Treat this as a review signal rather than a final attribution.

  • Source type: outside the affected organization
  • Source type: possible insider or internal misuse
Business impact
Potential data exposure

Impact area: Confidentiality

Likely asset: User or customer data

Trend context
69 signals with similar action pattern
  • 3 signals in the same sector
  • 90 signals with the same likely impact area
  • 1 signal linked to this organization/domain
Mentioned entities
Nissan GlobalData DisclosureOracle PeopleSoft Zero-Day NissanOracle PeopleSoft CVE-2026-35273EmployeeLinkedAttack

External sources

Related signals

Grouped by why the signal is relevant.

mtroyal.ca logoMtroyalJun 19, 2026
Same sectorSame action patternSame impact area

Mount Royal University Announces Cyber Security Incident

Mount Royal University announced on June 19, 2026, that disruptions to its websites and portals were the result of a cyber incident. The investigation is in its early stages, and it has not yet been determined if personal information or other data was accessed or taken.

nifty.com logoNiftyJun 28, 2026
Same action patternSame impact area

NIFTY Corporation Affected by KDDI Corporation Data Breach

NIFTY Corporation, a Japanese internet service provider, was impacted by a data breach originating from an email system provided by KDDI Corporation. Threat actors gained unauthorized access to this shared system by exploiting a vulnerability in third-party software. This led to the potential exposure of up to 14.2 million email addresses and passwords across all affected ISPs. NIFTY Corporation customers' email addresses and passwords may have been compromised.

biglobe.ne.jp logoBiglobeJun 28, 2026
Same action patternSame impact area

BIGLOBE Inc. Affected by KDDI Corporation Data Breach

BIGLOBE Inc., a Japanese internet service provider, was impacted by a data breach originating from an email system provided by KDDI Corporation. Threat actors gained unauthorized access to this shared system by exploiting a vulnerability in third-party software. This led to the potential exposure of up to 14.2 million email addresses and passwords across all affected ISPs. BIGLOBE Inc. customers' email addresses and passwords may have been compromised.

stnet.co.jp logoStnetJun 28, 2026
Same action patternSame impact area

STNet, Inc. Affected by KDDI Corporation Data Breach

STNet, Inc., a Japanese internet service provider, was impacted by a data breach originating from an email system provided by KDDI Corporation. Threat actors gained unauthorized access to this shared system by exploiting a vulnerability in third-party software. This led to the potential exposure of up to 14.2 million email addresses and passwords across all affected ISPs. STNet customers' email addresses and passwords may have been compromised.

kddi-web.com logoKddi WebJun 28, 2026
Same action patternSame impact area

KDDI Web Communications Customer Data Affected by KDDI Email System Breach

KDDI Web Communications, a subsidiary of KDDI, was impacted by the data breach in KDDI Corporation's email system, disclosed on June 28, 2026. The incident, caused by a third-party software vulnerability, led to the potential exposure of up to 14.2 million email addresses and passwords belonging to customers across six Japanese ISPs, including KDDI Web Communications.

jcom.co.jp logoJcomJun 28, 2026
Same action patternSame impact area

JCOM Co., Ltd. Affected by KDDI Corporation Data Breach

JCOM Co., Ltd., a Japanese internet service provider, was impacted by a data breach originating from an email system provided by KDDI Corporation. Threat actors gained unauthorized access to this shared system by exploiting a vulnerability in third-party software. This led to the potential exposure of up to 14.2 million email addresses and passwords across all affected ISPs. JCOM customers' email addresses and passwords may have been compromised.