Every public data breach

Disclosed this week44On record26,355

44 disclosed this week · 26,355 on record

Washington Post

Disclosed Nov 7, 20259,720 affectedConfirmed

Official notice

Oracle EBS hack exposes Washington Post staff bank and SSN data

The Washington Post said attackers exploiting the Oracle E-Business Suite zero-day accessed parts of its network between July 10 and August 22, 2025, exposing names, bank account and routing numbers, SSNs and tax IDs of 9,720 employees and contractors.

What is known

People affected9,720 (as reported by the organization)
DisclosedNov 7, 2025
DiscoveredSep 29, 2025
HappenedJul 10, 2025
AttackSupply chain
Data exposedNamesFinancialSocial Security numbersGovernment IDs
SectorMedia · US
StatusConfirmed
Part ofOracle ebs (2025)

Sources

Official noticeoag.ca.gov
California Attorney General breach notice: Washington Post
Official noticeatg.wa.gov
Washington Attorney General breach notice: Washington Post
Official noticejustice.oregon.gov
Oregon DOJ breach notice: Washington Post
Newstechcrunch.com
Washington Post confirms data breach linked to Oracle hacks
Newsbleepingcomputer.com
Washington Post data breach impacts nearly 10K employees, contractors
Official noticeago.vermont.gov
Vermont Attorney General: 2025-11-12 The Washington Post Data Breach Notice to Consumers
Official noticein.gov
Indiana Attorney General 2025 data breach report: Washington Post

Notices filed

TotalNov 7, 2025
Research9,720 people
Residents of CANov 12, 2025
California AGCount not stated
Residents of VTNov 12, 2025
Vermont AGCount not stated
Residents of INNov 12, 2025
Indiana AG45 people
Residents of CAJul 13
California AGCount not stated
Residents of WAJul 13
Washington AG514 people
Residents of ORJul 14
Oregon DOJ323 people

Same campaign

The Estée Lauder CompaniesEstee Lauder notifies employees of HR data theft via Oracle EBS flawHackingRetailUSUnverifiedJul 20Barts Health NHS TrustClop steals Barts Health invoices via Oracle EBS zero-daySupply chainHealthcareGBUnverifiedDec 5, 2025University of PhoenixClop Oracle EBS hack exposes 3.5M University of Phoenix recordsSupply chain3.5M affectedEducationUSDec 2, 2025Dartmouth CollegeClop Oracle EBS attack exposes SSNs of 1,494 Dartmouth individualsSupply chain99K affectedEducationUSNov 24, 2025Cox EnterprisesOracle EBS zero-day breach exposes 9,479 Cox Enterprises peopleSupply chain9,479 affectedMediaUSNov 20, 2025LogitechSupply chain exposed internal documents.Supply chainTechCHNov 14, 2025GlobalLogicOracle EBS zero-day breach exposes 10,471 GlobalLogic employeesSupply chain10K affectedTechUSNov 7, 2025Envoy AirClop steals business data from American Airlines' Envoy via Oracle EBSSupply chainTransportUSUnverifiedOct 17, 2025Harvard UniversityHarvard alumni and donor data stolen in Oracle EBS and phishing attacksHacking851K accountsEducationUSOct 13, 2025OracleClop exploits Oracle E-Business Suite zero-day to steal data from dozensSupply chainTechUSOct 2, 2025

Other breaches at Washington Post

Breach, details not statedExposed Social Security numbers, government IDs, health records, insurance details, payment cards, financial details and names. Reported to the Texas AG.36K affectedRetailUSJul 13Hackers steal 1.27 million user IDs and emails from Post jobs siteHacking exposed credentials and tokens and emails.Hacking1.3M affectedMediaUSUnverifiedJul 7, 2011
History of this record
source2026-09-25
empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-2025.pdfby backfillSource
source2026-09-25
empty to https://ago.vermont.gov/document/2025-11-12-washington-post-data-breach-notice-consumersby backfillSource
campaign2026-09-25
empty to oracle-ebs-2025by seedSource
sector2026-09-25
other to mediaby seedSource
attack2026-09-25
ransomware to supply-chainby seedSource
data_types2026-09-25
[] to ["names","financial","ssn","government-id"]by seedSource
records_basis2026-09-25
empty to organizationby seedSource
records2026-09-25
empty to 9720by seedSource
disclosed2026-09-25
2025-11-12 to 2025-11-07by seedSource
summary2026-09-25
empty to The Washington Post said attackers exploiting the Oracle E-Business Suite zero-day accessed parts of its network between July 10 and August 22, 2025, exposing names, bank account and routing numbers, SSNs and tax IDs of 9,720 employees and by seedSource
title2026-09-25
empty to Oracle EBS hack exposes Washington Post staff bank and SSN databy seedSource
attack2026-09-25
unknown to ransomwareby backfillSource
discovered2026-09-25
empty to 2025-09-29by backfillSource
disclosed2026-09-25
2026-07-13 to 2025-11-12by backfillSource
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Washington Post