A breach of the National Association of Insurance Commissioners' (NAIC) systems by the ShinyHunters extortion group has resulted in the theft of publicly available data, outdated logs, and configuration files. The attackers exploited a zero-day vulnerability in an Oracle PeopleSoft server to gain access. Fortunately, the stolen data was not sensitive, as it was already publicly available. The incident highlights the risks associated with zero-day exploits, which can be used to attack systems before patches are available, leaving defenders at a disadvantage1. The NAIC has likely mitigated the damage by containing the breach, but the use of a zero-day vulnerability underscores the importance of proactive security measures. The fact that publicly available data was stolen may seem minimal, but it still poses a risk if used in conjunction with other information. This breach matters to security practitioners because it demonstrates the need for swift action in response to zero-day exploits.