NAIC breach reveals Oracle PeopleSoft zero‑day stole public financial data
The National Association of Insurance Commissioners confirmed that a zero‑day flaw in Oracle PeopleSoft let attackers access a portion of its environment on June 11. The breach exposed only publicly available statutory financial reports and some outdated logs, with no evidence of personal, payment or policyholder data being taken, though rating agencies paused data feeds.