logo

Oracle Still Denies Breach as Researchers Persist

ID: 3df0a459-b44b-5251-9577-5d6c2f68ddef

STIX ID: report--3df0a459-b44b-5251-9577-5d6c2f68ddef

Feed Name: Dark Reading

Threat Score
75/100

Date Published: 2025-03-28

Date Updated: 2026-04-21

Author: Jai Vijayan, Contributing Writer

...
...

Multiple security researchers report that a threat actor claiming the handle "rose87168" is selling up to 6 million Oracle Cloud records (SSO/LDAP credentials and tenant metadata); CloudSEK and SOCRadar analyzed 10,000-record samples that they judge credible, while Oracle denies any breach, leaving customers urged to rotate credentials, audit access, and monitor for indicators of compromise.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.