Cox Enterprises
Disclosed Nov 20, 202510 months ago9,479 affectedConfirmed
Oracle EBS zero-day breach exposes 9,479 Cox Enterprises people
Cox Enterprises said it became aware of suspicious Oracle E-Business Suite activity on September 29, 2025 and found cybercriminals had exploited the zero-day in August; it notified 9,479 people.
What is known
| People affected | 9,479 (as reported by the organization) |
|---|---|
| Disclosed | Nov 20, 2025 |
| Discovered | Sep 29, 2025 |
| Happened | Aug 9, 2025 |
| Attack | Supply chain |
| Data exposed | Names, Other, Social Security numbers, Government IDs |
| Sector | Media · US |
| Status | Confirmed |
| Part of | Oracle ebs (2025) |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Cox Enterprisesoag.ca.gov · Official notice | Official notice |
| Cox Enterprises discloses Oracle E-Business Suite data breachbleepingcomputer.com · News | News |
| Texas Attorney General data security breach report BR-0004687: Cox Enterprisesoag.my.site.com · Official notice | Official notice |
| Vermont Attorney General: 2025-11-20 Cox Enterprises Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2025 data breach report: Cox Enterprisesin.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Nov 20, 2025 | |
| Vermont AGresidents of VT | Nov 20, 2025 | |
| Indiana AGresidents of IN | Nov 20, 2025 | 50 |
| Texas AGresidents of TX | Nov 21, 2025 | 1,504 |
| Researchtotal | Nov 22, 2025 | 9,479 |
Same campaign
History of this record
- 2026-09-25 · source: empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-2025.pdf · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2025-11-20-cox-enterprises-data-breach-notice-consumers · backfill source
- 2026-09-25 · data_types: ["names","other"] to ["names","other","ssn","government-id"] · backfill source
- 2026-09-25 · campaign: empty to oracle-ebs-2025 · seed source
- 2026-09-25 · sector: other to media · seed source
- 2026-09-25 · attack: unknown to supply-chain · seed source
- 2026-09-25 · data_types: [] to ["names","other"] · seed source
- 2026-09-25 · records_basis: empty to organization · seed source
- 2026-09-25 · records: empty to 9479 · seed source
- 2026-09-25 · discovered: empty to 2025-09-29 · seed source
- 2026-09-25 · summary: empty to Cox Enterprises said it became aware of suspicious Oracle E-Business Suite activity on September 29, 2025 and found cybercriminals had exploited the zero-day in August; it notified 9,479 people. · seed source
- 2026-09-25 · title: empty to Oracle EBS zero-day breach exposes 9,479 Cox Enterprises people · seed source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.