Washington Post notifies 10,000 individuals affected in Oracle-linked data theft

The Washington Post confirmed that between July 10 and August 22, 2025 attackers exploited a zero-day in Oracle E-Business Suite (CVE-2025-61884), leading to unauthorized access and theft of personal and financial data for nearly 10,000 employees and contractors; the Clop ransomware group claimed responsibility and added multiple victims, including Harvard and Envoy Air, to its leak site.