Cox Enterprises
Disclosed Nov 20, 20259,479 affectedConfirmed
Oracle EBS zero-day breach exposes 9,479 Cox Enterprises people
Cox Enterprises said it became aware of suspicious Oracle E-Business Suite activity on September 29, 2025 and found cybercriminals had exploited the zero-day in August; it notified 9,479 people.
What is known
| People affected | 9,479 (as reported by the organization) |
|---|---|
| Disclosed | Nov 20, 2025 |
| Discovered | Sep 29, 2025 |
| Happened | Aug 9, 2025 |
| Attack | Supply chain |
| Data exposed | NamesOtherSocial Security numbersGovernment IDs |
| Sector | Media · US |
| Status | Confirmed |
| Part of | Oracle ebs (2025) |
Sources
California Attorney General breach notice: Cox EnterprisesCox Enterprises discloses Oracle E-Business Suite data breachTexas Attorney General data security breach report BR-0004687: Cox EnterprisesVermont Attorney General: 2025-11-20 Cox Enterprises Data Breach Notice to ConsumersIndiana Attorney General 2025 data breach report: Cox Enterprises
Notices filed
Same campaign
History of this record
empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-2025.pdfby backfillSource
empty to https://ago.vermont.gov/document/2025-11-20-cox-enterprises-data-breach-notice-consumersby backfillSource
["names","other"] to ["names","other","ssn","government-id"]by backfillSource
empty to oracle-ebs-2025by seedSource
other to mediaby seedSource
unknown to supply-chainby seedSource
[] to ["names","other"]by seedSource
empty to organizationby seedSource
empty to 9479by seedSource
empty to 2025-09-29by seedSource
empty to Cox Enterprises said it became aware of suspicious Oracle E-Business Suite activity on September 29, 2025 and found cybercriminals had exploited the zero-day in August; it notified 9,479 people.by seedSource
empty to Oracle EBS zero-day breach exposes 9,479 Cox Enterprises peopleby seedSource
First recordedby backfillSource
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.