Oracle Extortion Case: $50M Demand From ‘Notorious’ Hacking Group

A campaign attributed to the Cl0p ransomware group compromised Oracle E-Business Suite access—apparently via abused email accounts and password-reset flows—and began extorting executives at multiple large organizations with ransom demands (reported up to $50M) by sending mass emails containing screenshots and file-tree evidence of stolen data; the report notes the group's shift from zero-day exploitation to credential-based phishing and references CISA guidance for mitigation.