Oracle Hit by Major Security Breach Exposing 140,000 Customers' Data
CSO Online
|
Contributed by: Drex DeFord
Summary
A security breach involving Oracle Cloud has exposed sensitive records from over 140,000 enterprise customers due to a vulnerability in Oracle Access Manager. Discovered by CloudSEK's XVigil team, the breach resulted in the theft of six million records, including critical security components like Java KeyStore files and encrypted passwords. The perpetrator, operating under the alias "rose87168," is selling the stolen data on underground forums and demanding ransom payments from affected organizations. While Oracle denies that customer data was compromised, the investigation indicates that the compromised server had not been updated in over a decade, highlighting significant security risks associated with known vulnerabilities. This breach has initiated an extortion campaign, presenting financial and ethical challenges for the impacted companies.
