In a digital age where transparency is currency, Oracle appears to have been dealing in shadows. After weeks of brushing off claims of a cyberattack on its cloud infrastructure, the tech titan is now quietly informing select customers that their data was, in fact, stolen\u2014a revelation that undercuts its earlier, emphatic denials.<\/p>\n
The breach, allegedly orchestrated by a hacker going by \u201crose87168,\u201d involved a staggering six million records\u2014sensitive items like private security keys, encrypted credentials, and LDAP entries. This wasn\u2019t some outdated, dusty archive of forgotten passwords. While Oracle insists the compromised server stored eight-year-old data, at least one affected client claims the stolen credentials were fresh enough to include 2024 logins.<\/p>\n
The entry point? According to independent cybersecurity analysts, Oracle failed to patch its own cloud login servers against CVE-2021-35587\u2014a vulnerability in Oracle Access Manager. Ironically, the very software Oracle sells as a security solution became the source of its exposure.<\/p>\n
Sources say Oracle has brought in CrowdStrike and involved the FBI, though both parties have largely remained tight-lipped. What\u2019s more concerning is that Oracle only contacted certain clients in private, raising red flags about potential violations of Europe\u2019s GDPR, which mandates disclosure within 72 hours of discovery. In the U.S., legal challenges are already bubbling up, including a lawsuit in Texas that could shed light on the timeline and Oracle’s internal response.<\/p>\n
This breach is reportedly separate from an ongoing incident involving Oracle Health, which the company has yet to publicly acknowledge.<\/p>\n
In the tech world, silence can be deafening\u2014but for customers whose trust and data were compromised, Oracle\u2019s hush-hush approach may be even more costly.<\/p>\n","protected":false},"excerpt":{"rendered":"
In a digital age where transparency is currency, Oracle appears to have been dealing in shadows. After weeks of brushing off claims of a cyberattack on its cloud infrastructure, the tech titan is now quietly informing select customers that their data was, in fact, stolen\u2014a revelation that undercuts its earlier, emphatic denials. The breach, allegedly […]<\/p>\n","protected":false},"author":20624,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[71,1],"tags":[93,1947,80,1350,3531],"class_list":["post-6072","post","type-post","status-publish","format-standard","hentry","category-featured","category-uncategorized","tag-cloud","tag-crowdstrike","tag-cybersecurity","tag-oracle","tag-oracle-health"],"acf":[],"yoast_head":"\n