Data Security NAIC confirms cyberattack after ShinyHunters claims 3.1TB data theft June 26, 2026 Share By SC Staff (Adobe Stock) The National Association of Insurance Commissioners (NAIC) has confirmed it was the victim of a cyberattack, with the group ShinyHunters claiming to have stolen 3.1 terabytes of data, according to a recent report by Tech Radar. The attack exploited a zero-day vulnerability in Oracle PeopleSoft, an enterprise resource planning software. ShinyHunters began exploiting this vulnerability on May 27, compromising over 100 organizations before Oracle released an emergency update on June 10. NAIC detected the breach on June 11 and disclosed it on June 17. NAIC stated that the stolen data includes publicly available statutory financial reports, insurer investment credit rating data, and technical information like outdated logs and configuration files. They maintain that no personal or banking information was accessed. However, ShinyHunters claims the stolen cache includes insurer filings, credit rating files, AWS logs, configurations, and personally identifiable information. The group's decision to leak the data online suggests NAIC did not pay a ransom. Source: Tech Radar SC Staff Related Data Security Meta pauses employee-tracking program amid data exposure concerns SC Staff June 23, 2026 The MCI program, launched in April, aimed to improve Meta's AI by analyzing employee interactions with computers, such as mouse movements and keyboard shortcuts. Encryption Trump administration accelerates transition to post-quantum encryption SC Staff June 23, 2026 The executive actions direct the government to support the quantum computing industry, building on previous efforts in artificial intelligence. Data Security London Hydro customer data potentially compromised in security incident SC Staff June 22, 2026 The utility disclosed that names, addresses, email addresses, phone numbers, account and billing numbers, service addresses, pricing plans, contract start dates, and meter information may have been accessed. Related Events Cybercast Beyond the Hype: The Cybersecurity Trends CISOs are Keeping an Eye on in 2026 On-Demand Event Cybercast Beyond the data perimeter: Why next-generation DSPM is the foundation for modern data security On-Demand Event Virtual Conference Securing the Future of Finance: Strategies to Counter Modern Cyber Threats On-Demand Event Get daily email updates SC Media's daily must-read of the most current and pressing daily news Business Email By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy . Subscribe Related Terms Block Cipher Byte Ciphertext Cyclic Redundancy Check (CRC) Data Aggregation Data Encryption Standard (DES) Decryption Diffie-Hellman Digital Signature Digital Signature Standard (DSS) You can skip this ad in 5 seconds