AI Summary

The National Association of Insurance Commissioners (NAIC) confirmed that the ShinyHunters extortion group accessed its systems by exploiting a zero‑day vulnerability in an Oracle PeopleSoft server. The attackers stole only publicly available data, outdated logs, and configuration files. NAIC, a U.S. insurance regulatory organization covering all 50 states, first identified the breach on June 11 when it discovered that an unauthorized third party had accessed a portion of its IT systems. The organization reported that the data taken was not sensitive or proprietary.

AI summaries can be wrong sometimes—always verify important details using the source article.