Skip to content

Envoy Air

Disclosed Oct 17, 202511 months agoUnverified

Clop steals business data from American Airlines' Envoy via Oracle EBS

Envoy Air, an American Airlines subsidiary, confirmed its Oracle E-Business Suite application was compromised after Clop listed American Airlines, saying only limited business information and commercial contact details were affected.

What is known

People affectedNot stated in the sources we have
DisclosedOct 17, 2025
AttackSupply chain
Data exposedNames, Other
SectorTransport · US
StatusUnverified: not yet confirmed by an official notice, a filing or the organization
Part ofOracle ebs (2025)

Sources

Notices filed

WhereFiledPeople
ResearchtotalOct 17, 2025

Same campaign

OrganizationAffected
The Estée Lauder CompaniesEstee Lauder notifies employees of HR data theft via Oracle EBS flawJul 202 months agoHackingUnverifiedUnknown
Barts Health NHS TrustClop steals Barts Health invoices via Oracle EBS zero-dayDec 5, 20259 months agoSupply chainUnverifiedUnknown
University of PhoenixClop Oracle EBS hack exposes 3.5M University of Phoenix recordsDec 2, 20259 months agoSupply chain3.5M
Dartmouth CollegeClop Oracle EBS attack exposes SSNs of 1,494 Dartmouth individualsNov 24, 202510 months agoSupply chain99K
Cox EnterprisesOracle EBS zero-day breach exposes 9,479 Cox Enterprises peopleNov 20, 202510 months agoSupply chain9,479
LogitechLogitech confirms data theft in Clop Oracle zero-day campaignNov 14, 202510 months agoSupply chainUnknown
Washington PostOracle EBS hack exposes Washington Post staff bank and SSN dataNov 7, 202510 months agoSupply chain9,720
GlobalLogicOracle EBS zero-day breach exposes 10,471 GlobalLogic employeesNov 7, 202510 months agoSupply chain10K
Harvard UniversityHarvard alumni and donor data stolen in Oracle EBS and phishing attacksOct 13, 202511 months agoHackingUnverifiedUnknown
OracleClop exploits Oracle E-Business Suite zero-day to steal data from dozensOct 2, 202511 months agoSupply chainUnknown
History of this record
  • 2026-09-25 · added · seed source

First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.

Everything about Envoy Air

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.