News from
Oracle Acknowledges Data Breach and Starts Informing Affected Clients
2025-04-28 00:45:03| Spiritual Career Counseling
Oracle Corporation has confirmed a data breach involving its older Gen 1 servers, marking the second cybersecurity incident disclosed by the company in recent weeks. The breach, initially reported by a threat actor on Breachforums on March 20, 2025, has raised concerns about the security of Oracles cloud infrastructure and its ability to safeguard sensitive client data.The threat actor, identified as rose87168, claimed responsibility for the breach and alleged access to 6 million data records. The stolen data reportedly includes usernames, email addresses, hashed passwords, and sensitive authentication credentials such as Single Sign-On (SSO) and Lightweight Directory Access Protocol (LDAP) information.The attacker also exfiltrated Java Key Store (JKS) files and Enterprise Manager JPS keys. While no complete Personally Identifiable Information (PII) was exposed, Oracle confirmed that the compromised data is approximately 16 months old.The breach was facilitated through a 2020 Java e...
Category:
Employment