Washington Post confirms data on nearly 10,000 people stolen from its Oracle environment

Clop exploited a zero-day in Oracle E-Business Suite (CVE-2025-61882) to access multiple customer environments, steal extensive HR and financial data (including Social Security and bank account numbers), and issue extortion demands; The Washington Post confirmed exposure of data for about 9,720 people and Oracle released a patch after the incidents were publicly disclosed.