University of Pennsylvania joins growing pool of Oracle customers impacted by Clop attacks

**Executive summary:** The Clop ransomware group exploited a zero-day and other vulnerabilities in Oracle E-Business Suite in August to exfiltrate data from nearly 100 organizations (including University of Pennsylvania, Dartmouth, Harvard, Cox, and Logitech) and pursue extortion; victims discovered compromise after Oracle disclosed the flaw, organizations have applied patches, and exposed data reportedly included personal and financial information for some victims.