Oracle is privately confirming to customers that some of its cloud systems have been breached, and is apparently trying to downplay the impact of the incident.
A hacker who uses the online moniker ‘rose87168’ recently offered to sell millions of lines of data allegedly associated with over 140,000 Oracle Cloud tenants, including encrypted credentials. The hacker initially hoped to extort a $20 million payment from Oracle, but later offered to sell the data to anyone or trade it for zero-day exploits.
After the hacker’s claims came to light, Oracle categorically denied an Oracle Cloud hack, saying, “There has been no breach of Oracle Cloud. The published credentials are not for the Oracle Cloud. No Oracle Cloud customers experienced a breach or lost any data.”
