6 Million Pieces of Company Data Up for Sale, Oracle Strongly Denies Breach Claims

CloudSEK: Millions of company data leaked
According to a report published by Bengaluru-based cybersecurity firm CloudSEK, a hacker with the pseudonym 'rose87168' has put up for sale online 6 million company records that he claims to have stolen from Oracle systems. The report stated that the data in question includes critical files, encrypted login credentials and keys used for secure connections.
 
 
Oracle's outright denial of the allegations
Oracle, in its public statement, defended the allegations as untrue. The statement included the following statements: 'There was no data breach in Oracle Cloud. The identity information that was revealed does not belong to Oracle Cloud. There is no data loss among our customers.'
 
Ransom demand and decryption attempts
According to CloudSEK’s assessments, the hacker reached out to more than 140,000 companies whose data security was compromised and demanded ransom in exchange for the deletion of stolen data. It was reported that the hacker also asked online platforms for help in decrypting encrypted information and offered a reward to those who could provide a solution.
 
Is the vulnerability Oracle WebLogic Server?
The report suggested that the hacker may have exploited a vulnerability in the login module in Oracle Cloud systems. Experts believe that this vulnerability may be related to Oracle WebLogic Server software.
 
Potential threat to companies
The alleged leaked data includes JKS files, encrypted single sign-on (SSO) passwords, various key files, and Oracle Enterprise Manager JPS keys. Such information could pose a risk of infiltration into wider systems through unauthorized access.
 
Experts call on companies to take urgent action
In order to prevent possible threats, companies are advised to update their passwords immediately and choose strong, complex passwords. Additionally, it is recommended to activate multi-factor authentication (MFA) systems.
 
 
 
Source: CUMHA - CUMHURS NEWS AGENCY