Washington Post Oracle E-Suite Breach Exposes Data of Over 9,000 Staff and Contractors

The Washington Post disclosed a significant data breach affecting more than 9,700 employees and contractors following an external system compromise targeting its Oracle E-Suite infrastructure.

The breach, which occurred on July 10, 2025, went undetected for nearly 3.5 months before being discovered on October 27, 2025.

Scope of the Incident

According to breach notifications filed with Maine regulators, the incident impacted 9,720 individuals in total, including 31 Maine residents.

The compromised data included names and personal identifiers, as well as additional sensitive information. However, specific details about the full scope of the exposed records remain limited in public disclosures.

The Washington Post, headquartered at 1301 K Street NW in Washington, DC, confirmed the breach was the result of external hacking activity targeting its Oracle E-Suite systems.

The organization discovered the unauthorized access approximately 3.5 months after the initial intrusion occurred.

Following the discovery, The Washington Post ...