There are perhaps 10,000 reasons to doubt Oracle Cloud's security breach denial

Researchers say a threat actor, "rose87168", claims to have exfiltrated ~6 million records from Oracle Cloud login infrastructure — including customer security keys, encrypted credentials, and LDAP/SSO entries — and provided a 10,000-line sample to analysts; multiple customers and security firms (Hudson Rock, CloudSEK) have validated portions of the sample while Oracle denies any breach. The report notes the alleged exploitation of CVE-2021-35587 in Oracle Access Manager, potential widespread impact across ~1,500 organizations, and recommends rotating credentials, enforcing MFA, and initiating incident response if affected.