ShinyHunters Extorted Boeing Spin-Off Prior to Arrests

This report shows how a prolific threat group weaponized an Oracle PeopleSoft zero-day to steal data across many industries and even extort a recently divested Boeing business unit, underscoring that high-profile breaches can emerge from routine enterprise applications and inherited carve-outs. For CIOs and technology leaders, the business risk is not just data loss but operational, regulatory, and safety exposure—especially when security responsibilities are fragmented across subsidiaries, vendors, and post-divestiture environments. IT organizations should assume rapid exploitation of internet-facing enterprise software, pair patching with compensating controls, and tighten governance over inherited systems and sensitive data.