Google said a major cyberattack targeting Oracle’s business software has likely compromised over 100 organizations, exposing massive amounts of sensitive data in what could become one of the year’s largest corporate breaches.
The attackers, linked to the CL0P ransomware group, infiltrated Oracle’s E-Business Suite, used globally for managing operations such as manufacturing, logistics, and supplier relations. Google said the campaign began months ago and involved “significant pre-attack research and resources.”
“Dozens of victims are confirmed, but we expect many more,” said Google security analyst Austin Larsen, warning that the scale mirrors past CL0P operations. Oracle acknowledged extortion activity targeting clients but has not disclosed further details.
CL0P, which has carried out multiple high-profile attacks in recent years, claims Oracle’s software contained critical flaws. Experts warn that the incident highlights persistent vulnerabilities in enterprise software supply chains, where a single exploited vendor can expose vast networks of customers.
