Skip to content

Cox Enterprises

Disclosed Nov 20, 202510 months ago9,479 affectedConfirmed

Official notice

Oracle EBS zero-day breach exposes 9,479 Cox Enterprises people

Cox Enterprises said it became aware of suspicious Oracle E-Business Suite activity on September 29, 2025 and found cybercriminals had exploited the zero-day in August; it notified 9,479 people.

What is known

People affected9,479 (as reported by the organization)
DisclosedNov 20, 2025
DiscoveredSep 29, 2025
HappenedAug 9, 2025
AttackSupply chain
Data exposedNames, Other, Social Security numbers, Government IDs
SectorMedia · US
StatusConfirmed
Part ofOracle ebs (2025)

Sources

Notices filed

WhereFiledPeople
California AGresidents of CANov 20, 2025
Vermont AGresidents of VTNov 20, 2025
Indiana AGresidents of INNov 20, 202550
Texas AGresidents of TXNov 21, 20251,504
ResearchtotalNov 22, 20259,479

Same campaign

OrganizationAffected
The Estée Lauder CompaniesEstee Lauder notifies employees of HR data theft via Oracle EBS flawJul 202 months agoHackingUnverifiedUnknown
Barts Health NHS TrustClop steals Barts Health invoices via Oracle EBS zero-dayDec 5, 20259 months agoSupply chainUnverifiedUnknown
University of PhoenixClop Oracle EBS hack exposes 3.5M University of Phoenix recordsDec 2, 20259 months agoSupply chain3.5M
Dartmouth CollegeClop Oracle EBS attack exposes SSNs of 1,494 Dartmouth individualsNov 24, 202510 months agoSupply chain99K
LogitechLogitech confirms data theft in Clop Oracle zero-day campaignNov 14, 202510 months agoSupply chainUnknown
Washington PostOracle EBS hack exposes Washington Post staff bank and SSN dataNov 7, 202510 months agoSupply chain9,720
GlobalLogicOracle EBS zero-day breach exposes 10,471 GlobalLogic employeesNov 7, 202510 months agoSupply chain10K
Envoy AirClop steals business data from American Airlines' Envoy via Oracle EBSOct 17, 202511 months agoSupply chainUnverifiedUnknown
Harvard UniversityHarvard alumni and donor data stolen in Oracle EBS and phishing attacksOct 13, 202511 months agoHackingUnverifiedUnknown
OracleClop exploits Oracle E-Business Suite zero-day to steal data from dozensOct 2, 202511 months agoSupply chainUnknown
History of this record
  • 2026-09-25 · source: empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-2025.pdf · backfill source
  • 2026-09-25 · source: empty to https://ago.vermont.gov/document/2025-11-20-cox-enterprises-data-breach-notice-consumers · backfill source
  • 2026-09-25 · data_types: ["names","other"] to ["names","other","ssn","government-id"] · backfill source
  • 2026-09-25 · campaign: empty to oracle-ebs-2025 · seed source
  • 2026-09-25 · sector: other to media · seed source
  • 2026-09-25 · attack: unknown to supply-chain · seed source
  • 2026-09-25 · data_types: [] to ["names","other"] · seed source
  • 2026-09-25 · records_basis: empty to organization · seed source
  • 2026-09-25 · records: empty to 9479 · seed source
  • 2026-09-25 · discovered: empty to 2025-09-29 · seed source
  • 2026-09-25 · summary: empty to Cox Enterprises said it became aware of suspicious Oracle E-Business Suite activity on September 29, 2025 and found cybercriminals had exploited the zero-day in August; it notified 9,479 people. · seed source
  • 2026-09-25 · title: empty to Oracle EBS zero-day breach exposes 9,479 Cox Enterprises people · seed source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Cox Enterprises

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.