Washington Post data breach impacts nearly 10K employees, contractors

The Washington Post notified nearly 9,720 employees and contractors that attackers exploited a then-zero-day in Oracle E-Business Suite (CVE-2025-61884) to steal sensitive personal and financial data—including full names, bank account and routing numbers, Social Security numbers, and tax/ID numbers—and attempted to extort the organization; the activity has been linked to the Clop ransomware group and similar breaches have affected other major organizations.