Extortionists Claim Mass Oracle E-Business Suite Data Theft

Executives Receiving Ransom Demands of Up to $50 Million, Warns Ransomware Expert Mathew J. Schwartz (euroinfosec) • October 2, 2025

Digital extortionists are shaking down executives at organizations that use Oracle E-Business Suite, claiming to have stolen their sensitive data, warn multiple cybersecurity firms.

See Also: When Identity Protection Fails: Rethinking Resilience for a Modern Threat Landscape

Google said its Mandiant incident response group is probing the "high-volume email campaign" by a group that claims to be affiliated with the Clop - aka Cl0p - ransomware operation. The emails, sent to many different organizations, claim attackers stole data from their Oracle enterprise applications.

Oracle didn't immediately respond to a request for comment.

Oracle E-Business Suite comprises everything from enterprise resource planning and customer relationship management, to human resources and supply chain management software.

Cybersecurity firm Halcyon said it's also responding to this campaign and that the attackers appear ...