Cybercriminals claim a breach of Oracle PeopleSoft servers at more than 100 organizations

The notorious cybercrime group ShinyHunters claimed to have hacked Oracle PeopleSoft servers at more than 100 organizations, many of them universities, a ShinyHunters member told TechCrunch on Wednesday. The violations were first reported by BleepingComputer.

PeopleSoft is enterprise software designed to manage payroll, human resources, administration and other business processes.

News shows that despite being one of the most visible and prolific cybercrime groups at the moment, ShinyHunters is not slowing down and has turned mass hacking into its specialty. The group’s modus operandi is to find a vulnerability in a popular piece of software so they can hack multiple victims at once.

“Student, applicant, financial aid, immigration, health, and administrative data has been pulled,” said a message that the hacker said was sent to one of the victims. The hackers claimed to have stolen student records that included home addresses, phone numbers, emails and dates of birth.

The hacker added that most of the targeted schools had already been hacked in previous, unrelated campaigns.

The group’s original goal was to hack into the FBI’s PeopleSoft server, the member said, and the goal was to publish a statement denying that ShinyHunters was behind a wave of swatting attempts that the FBI reported in an alert last month. The member said that the attempt failed.

Oracle did not respond to a request for comment.