Oracle faced two data security incidents with reported poor incident communication. An attacker allegedly accessed login servers and legacy Cerner data, leading to customers' personal information being at risk. Missteps in Oracle's response include outright denial, potentially misleading statements, and accusations of deleting evidence online, compounding the damage to their reputation.
Source: https://www.theregister.com/2025/04/02/oracle_breach_disaster_planning/
TPRM report: https://scoringcyber.rankiteo.com/company/oracle
"id": "ora656040225",
"linkid": "oracle",
"type": "Breach",
"date": "4/2025",
"severity": "100",
"impact": "7",
"explanation": "Attack that could injure or kill people"{'affected_entities': [{'industry': 'Technology',
'name': 'Oracle',
'type': 'Corporation'}],
'attack_vector': ['Login Server Access', 'Legacy Cerner Data Access'],
'data_breach': {'type_of_data_compromised': 'Personal Information'},
'description': 'Oracle faced two data security incidents with reported poor '
'incident communication. An attacker allegedly accessed login '
"servers and legacy Cerner data, leading to customers' "
"personal information being at risk. Missteps in Oracle's "
'response include outright denial, potentially misleading '
'statements, and accusations of deleting evidence online, '
'compounding the damage to their reputation.',
'impact': {'brand_reputation_impact': 'Damaged Reputation',
'data_compromised': 'Personal Information',
'systems_affected': ['Login Servers', 'Legacy Cerner Data']},
'references': [{'source': 'Cyber Incident Description'}],
'response': {'communication_strategy': ['Outright Denial',
'Potentially Misleading Statements',
'Accusations of Deleting Evidence '
'Online']},
'title': 'Oracle Data Security Incidents',
'type': 'Data Breach'}