#CISA warns of increased breach risks following #OracleCloud leak
This warning comes after #Oracle confirmed in email notifications sent to customers that a threat actor leaked credentials stolen from what the company described as "two obsolete servers."
However, Oracle added that its Oracle Cloud servers were not compromised, and the incident didn't impact its cloud services or customer data.
https://www.bleepingcomputer.com/news/security/cisa-warns-of-increased-breach-risks-following-oracle-cloud-leak/
Recent searches
Search options
Administered by:
#oraclecloud
1 post1 participant0 posts today
This milestone reflects my skills in:
Excited to keep growing in the world of cloud-native technologies! 
#OracleCloud #kubernetes #CloudNative #DevOps
ALT
Yeah, #Oracle covering up their #OracleCloud #breach is just bad and inexcuseable!
If Oracle can worm their way out of this on wordplay alone, then there is something serious wrong with regulations and law. A company as huge as Oracle needs to take ownership and set an example, this has been handled poorly and recklessly from the start, this surely has to have long last ramifications on the company?
Offensichtlich stahl ein #hacker, der sich "rose87168" nannte, am 21. März 2025 etwa 6 Millionen Kundendaten vom Single Sign-on (SSO) Login-Server von #OracleCloud . #oracle hat eine Erklärung abgegeben, dass "kein unbefugter Zugriff stattgefunden hat". Gleichzeitig hat Oracle das Internet-Archiv #internetarchive gebeten, Seiten zu löschen, auf denen Beweise für das Eindringen" sind.
https://gigazine.net/gsc_news/en/20250402-oracle-cybersecurity-incident/
ALT
Larry’s PR angels desperately dance on the head of a pin.
#Oracle is now admitting that, yes, an #OracleCloud service was breached—or so we’re told by deep throat sources. This is, of course, despite last week’s vehement denials.
Yet it’s still not official. And Oracle seems to be justifying its previous denial with a semantic sleight-of-hand worthy of Bill Clinton. In #SBBlogwatch, we see men tic.
@TheFuturumGroup @TechstrongGroup @SecurityBlvd: https://securityboulevard.com/2025/04/oracle-cloud-breach-redux-richixbw/?utm_source=richisoc&utm_medium=social&utm_content=richisoc&utm_campaign=richisoc
Security Boulevard · Oracle Hack: From ‘Deny-Deny-Deny’ to ‘Oops-Oops-Oops’Classic “wordplay:” Larry’s PR angels desperately dance on the head of a pin.
Oracle buried serious data breach from customers, now hacker has it up for sale
Company remains quiet since denying the attack, even after researchers conclude the breach is real
#oracle #OracleCloud #databreach #security #cybersecurity #infosec #hackers #hacking #hacked
https://www.techspot.com/news/107362-oracle-hid-serious-data-breach-customers-now-hacker.html
TechSpot · Oracle buried serious data breach from customers, now hacker has it up for sale
How Oracle took a security breach claim and made it worse • The Register
https://www.theregister.com/2025/04/02/oracle_breach_disaster_planning/
Spot the #lawyer whose advice has been ignored and steam rolled by #pr. #oraclecloud #lawfedi
The Register · Oracle's masterclass in breach comms: Deny, deflect, repeat
https://www.europesays.com/1963298/ Oracle continues to deny breach, tries to hide evidence #breach #Cybersecurity #Data #DataBreach #Oracle #OracleCloud
ALT
Is today when Oracle says April fools, our cloud service was actually hacked?
The evidence is starting to stack up.
After a March 21 report on a possible breach of Oracle Cloud, Oracle's unclear communication has left customers uncertain about the impact. Transparency is key! 
ALT
Replied to 
decio
decio
Je sens que l'oracle va finir par parler…
Il faut "juste" lui poser la bonne question 
En attendant, @GossiTheDog pointe ça 
"Oracle tente de dissimuler un incident de cybersécurité majeur affectant ses services SaaS."
"Oracle choisit soigneusement ses mots pour esquiver toute responsabilité."
"Oracle attempt to hide serious cybersecurity incident from customers in Oracle SaaS service"
"Oracle are attempting to wordsmith statements around Oracle Cloud and use very specific words to avoid responsibility."
https://doublepulsar.com/oracle-attempt-to-hide-serious-cybersecurity-incident-from-customers-in-oracle-saas-service-9231c8daff4a
DoublePulsar · Oracle attempt to hide serious cybersecurity incident from customers in Oracle SaaS service
Larry Ellison’s PR pukes desperately follow the script.
A hacker claims to have breached #OracleCloud Infrastructure (OCI), stealing 6,000,000 records. But #Oracle Corp. says that’s not true.
However, many customers confirmed the data is genuine. Several researchers point to a four-year-old critical vulnerability as the hacker’s entry point. But still Oracle keeps up the pretense.
“There has been no breach,” the PR flaks cry. In #SBBlogwatch, we cry too. @TheFuturumGroup @TechstrongGroup @SecurityBlvd: https://securityboulevard.com/2025/03/oracle-cloud-breach-deny-richixbw/?utm_source=richisoc&utm_medium=social&utm_content=richisoc&utm_campaign=richisoc
Security Boulevard · Oracle Hack PR Drama: Deny, Deny, Deny — Despite Damning DataOCI dokey then: Larry Ellison’s PR pukes desperately follow the script.
Ein Hackerangriff auf #Oracle sorgt für Aufsehen. Mehrere Unternehmen haben bestätigt, dass ihre #Kundendaten, die ein Angreifer online veröffentlicht hat, echt sind.
Laut #Sicherheitsforschern nutzte der Angreifer eine #Schwachstelle in der veralteten #Middleware Oracle Fusion Middleware 11g. #Oracle hatte den Vorfall zunächst abgestritten. Betroffen sind bis zu sechs Millionen #Datensätze.
Breaking: Reports of a potential Oracle Cloud breach exposing 6 million records are circulating, though Oracle denies the claims. Stay tuned for updates on this developing cybersecurity incident.
#SecurityLand #CyberWatch #OracleCloud #DataBreach #Cybersecurity
Security Land · Oracle Cloud Security Alert: Alleged Breach Exposes Millions of User Records | Security LandReports surface of a potential Oracle Cloud breach affecting 6 million user records, including encrypted passwords. Oracle denies the claims.
Oracle denies breach after hacker claims theft of 6 million data records
Oracle denies it was breached after a threat actor claimed to be selling 6 million data records allegedly stolen from the company's Oracle Cloud federated SSO login servers
#oracle #oraclecloud #databreach #security #cybersecurity #hackers #hacking #hacked
Replied to decio
decio[related]
"Big - I just received 10,000 records from the Oracle breach, given to me by 'rose87168,' and I'm actively working to validate the claims (initial feedback from customers received, likely confirming the breach)."
...
"1. The users provided to them from the sample exist.
- At the moment, they can't verify the tenant ID matches but are looking into it.
- The users found in the sample are actively hosting data.
- Several of the users have access to sensitive data(!!!) (likely disproving the test env assumption)."
"Edit: 2nd customer confirming the data is real, in his case old, but for prod.
Edit 2: Third customer confirmed the users and tenant ids match, and that they are for prod environmen t"
www.linkedin.comBig - I just received 10,000 records from the Oracle breach, given to me… | Alon Gal | 44 commentsBig - I just received 10,000 records from the Oracle breach, given to me by 'rose87168,' and I’m actively working to validate the claims (initial feedback from… | 44 comments on LinkedIn
https://www.cyberkendra.com/2025/03/oracle-cloud-security-breach-exposes-6.html
#oraclecloud #hack #databreach
Cyber KendraOracle Cloud Security Breach Exposes 6 Million Records Affecting 140,000 Tenants6 million sensitive records compromised in biggest supply chain attack affecting 140,000 enterprise tenants worldwide.
Ho provato a fare una breve iniziale analisi del poco che si può evincere dalla recente rivendicazione di leak Oracle Cloud.
Ne sono emersi alcuni dettagli che coinvolgono, se verificato, quasi 2000 aziende italiane di rilievo 
Cyber Security 360 · Violazione dei dati di login SSO di Oracle Cloud: l'azienda smentisce, ecco cosa sappiamo - Cyber Security 360Un attaccante, su un noto forum, rivendica il possesso di un importante leak di Oracle Cloud, che riguarderebbe gli accessi di oltre 140mila aziende che hanno l'infrastruttura su tale servizio. Ma il leak non è ancora verificato, Oracle smentisce. Cosa si evince dal materiale in circolazione
Hack: 6M Records for Sale Exfiltrated from Oracle Cloud Affecting 140k+ Tenants
www.cloudsek.comThe Biggest Supply Chain Hack Of 2025: 6M Records Exfiltrated from Oracle Cloud affecting over 140k Tenants | CloudSEKCloudSEK uncovers a major breach targeting Oracle Cloud, with 6 million records exfiltrated via a suspected undisclosed vulnerability. Over 140,000 tenants are impacted, as the attacker demands ransom and markets sensitive data online. Learn the full scope, risks, and how to respond. Are you worried your organization might be affected? Check your exposure here - https://exposure.cloudsek.com/oracle