Major Software Vulnerability Being Fixed: What HR Employees and Job Seekers Should Know

Oracle has released security mitigations for a vulnerability in its PeopleSoft software. The vulnerability is identified as CVE-2026-35273 (an industry tracking number for this software flaw), and there are reports it may have been exploited in attacks linked to a hacking group called ShinyHunters. PeopleSoft is commonly used by large companies, universities, and government agencies to manage human resources, payroll, and employee information. Oracle has not confirmed whether this vulnerability was actively exploited before the fix was made available. This affects people who work for organizations that use PeopleSoft for HR functions. If your company uses this software, employee data such as names, addresses, Social Security numbers, salary information, and benefits details could potentially be stored in the system. A vulnerability means hackers might have found a way to access this information without authorization.

If you have ever applied for a job at a company that uses PeopleSoft, your application information might also be stored there.

Here is what you should do. First, contact your company's HR department or IT help desk and ask if they use PeopleSoft and whether they have applied the latest security updates. You have a right to know if your employer is protecting your personal information. Second, monitor your credit reports for any unusual activity. You can get free credit reports from each of the three major credit bureaus once per year. Third, watch for suspicious emails or phone calls from people claiming to be from your employer and asking for personal information. Criminals sometimes use stolen HR data to craft convincing phishing scams. Fourth, if your employer confirms they were affected, ask what specific data may have been exposed and whether they are offering credit monitoring services. For long term protection, consider placing a fraud alert or security freeze on your credit reports. This makes it harder for criminals to open new accounts in your name. Use strong, unique passwords for any employee portals you access. Save copies of your pay stubs and important work documents in case you need them later.

Remember that your employer has a responsibility to protect your data, so do not hesitate to ask questions about their cybersecurity practices.