Oracle confirmed a security incident involving obsolete servers that resulted in the theft and leakage of user credentials. Although Oracle Cloud services remained uncompromised, affected servers were part of what was formerly known as Oracle Cloud Classic. The breach brought to light legacy data, including user emails, hashed passwords, and usernames, some dating back to 2025. The event underscores the risks of maintaining outdated systems and the importance of clear communication in the face of cybersecurity incidents. Primary concerns revolve around the potential misuse of the stolen credential information and Oracle's subsequent efforts to mitigate any associated risks.
"id": "ora1045040925",
"linkid": "oracle",
"type": "Breach",
"date": "4/2025",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"