Every public data breach

Disclosed this week44On record26,355

44 disclosed this week · 26,355 on record

Oracle

Disclosed Oct 2, 2025Confirmed

Official notice

Clop exploits Oracle E-Business Suite zero-day to steal data from dozens

Starting around September 29, 2025, executives received Clop extortion emails claiming theft of Oracle E-Business Suite data; CrowdStrike and Google found Clop had exploited the zero-day CVE-2025-61882 since at least early August to steal HR, financial and other business data from dozens of organizations.

What is known

People affectedNot stated in the sources we have
DisclosedOct 2, 2025
AttackSupply chain
Data exposedEmploymentFinancialInternal documentsSocial Security numbersNames
SectorTech · US
StatusConfirmed
Part ofOracle ebs (2025)

Sources

Newstechcrunch.com
Dozens of organizations had data stolen in Oracle-linked hacks
Newsbleepingcomputer.com
Clop extortion emails claim theft of Oracle E-Business Suite data
Newsbleepingcomputer.com
Clop exploited Oracle zero-day for data theft since early August
The organizationoracle.com
Oracle Security Alert CVE-2025-61882

Notices filed

TotalOct 2, 2025
ResearchCount not stated

Same campaign

The Estée Lauder CompaniesEstee Lauder notifies employees of HR data theft via Oracle EBS flawHackingRetailUSUnverifiedJul 20Barts Health NHS TrustClop steals Barts Health invoices via Oracle EBS zero-daySupply chainHealthcareGBUnverifiedDec 5, 2025University of PhoenixClop Oracle EBS hack exposes 3.5M University of Phoenix recordsSupply chain3.5M affectedEducationUSDec 2, 2025Dartmouth CollegeClop Oracle EBS attack exposes SSNs of 1,494 Dartmouth individualsSupply chain99K affectedEducationUSNov 24, 2025Cox EnterprisesOracle EBS zero-day breach exposes 9,479 Cox Enterprises peopleSupply chain9,479 affectedMediaUSNov 20, 2025LogitechSupply chain exposed internal documents.Supply chainTechCHNov 14, 2025Washington PostOracle EBS hack exposes Washington Post staff bank and SSN dataSupply chain9,720 affectedMediaUSNov 7, 2025GlobalLogicOracle EBS zero-day breach exposes 10,471 GlobalLogic employeesSupply chain10K affectedTechUSNov 7, 2025Envoy AirClop steals business data from American Airlines' Envoy via Oracle EBSSupply chainTransportUSUnverifiedOct 17, 2025Harvard UniversityHarvard alumni and donor data stolen in Oracle EBS and phishing attacksHacking851K accountsEducationUSOct 13, 2025

Other breaches at Oracle

Hacker steals patient data from legacy Oracle Health (Cerner) serversHacking exposed health records and names.HackingHealthcareUSUnverifiedMar 28, 2025Hacker steals Oracle Cloud SSO login data; Oracle blames obsolete serversHacking exposed emails, credentials and tokens and passwords.HackingTechUSUnverifiedMar 21, 2025
History of this record
Added2026-09-25
First recordedby seedSource

First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.

Everything about Oracle