Oracle has experienced a second cybersecurity breach within the space of a month, with hackers accessing and stealing old client log-in credentials. This latest breach is separate from an earlier incident in March that targeted healthcare clients. The compromised data includes usernames, passkeys, and encrypted passwords from what Oracle describes as a 'legacy environment,' which has not been in use for eight years. However, some of the stolen information reportedly dates as recent as 2024.
According to Insider Monkey, the Federal Bureau of Investigation (FBI) is investigating the breach, and Oracle reported that the hacker attempted to extort the company. Additionally, the cybersecurity firm CrowdStrike is involved in probing the incident. Despite alarming developments, Oracle has denied related allegations of a breach in its Oracle Cloud infrastructure, where sensitive credentials from over 140,000 tenants were supposedly compromised.
Oracle maintains there has been no breach of its cloud services, despite confirmations from several cybersecurity firms that validate the legitimacy of the stolen data in the alleged cloud breach. As reactions in the industry call for more transparency, Oracle remains firm in their denial of the Oracle Cloud incident, which has attracted scrutiny and demands for clarity on how client data is secured.