Oracle reports second hack in a month, client log-in data stolen - Bloomberg

  • April 2, 2025

Investing..com -- Oracle Corp (NYSE: ORCL ). recently disclosed to its customers that it had suffered a cybersecurity breach, marking the second such incident the company has reported within a month. A hacker infiltrated a computer system, resulting in the theft of old client log-in credentials, according to Bloomberg News, citing two people familiar with the matter. The breach has prompted an investigation by the FBI and cybersecurity firm CrowdStrike Holdings (NASDAQ: CRWD ) Inc.

The compromised data includes usernames, passkeys, and encrypted passwords, which Oracle staff revealed to some clients earlier this week. The affected clients were informed under the condition of anonymity due to restrictions on discussing the matter publicly.

The software giant has also indicated to customers that the hacker attempted to extort the company, demanding a payment following the breach. Oracle has clarified that this recent security issue is distinct from another hack reported to certain health-care clients in March.

Oracle representatives have described the compromised system as a "legacy environment" to some of their clients. They reassured them that this system had not been in use for eight years, suggesting that the stolen credentials should not present a significant risk.

However, a third individual familiar with the situation, who also requested anonymity, told Bloomberg that the stolen data includes customer log-in information from as recent as 2024. This detail raises concerns about the potential impact and scope of the data breach. Oracle has not yet provided a public statement regarding the full extent of the breach or its response to the extortion attempt.

This article was generated with the support of AI and reviewed by an editor. For more information see our T&C.

0.089035s