Cl0p Strikes Again: Envoy Air Hit in Oracle EBS Cyber Heist!
Envoy Air has confirmed its involvement in the Oracle EBS cybercrime campaign, but don’t cancel your flight just yet—they say no sensitive data was compromised. Although hackers snagged over 26 GB of American Airlines-related files, Envoy insists it’s just “business information” and not your frequent flyer miles.

Hot Take:
It seems like the Cl0p ransomware group decided to play a little game of “Catch Me If You Can” with organizations using Oracle’s E-Business Suite. Envoy Air, a subsidiary of American Airlines, has unexpectedly become the star player in this cybersecurity drama, with hackers showing off their stolen 26 GB of data like it’s a collector’s item. But don’t worry, Envoy reassures us that none of the juicy stuff was compromised—just a sprinkle of business info and some commercial contacts. It’s like getting robbed but only losing the spare change in your car.
Key Points:
- Cl0p ransomware group targets Oracle EBS users, including Envoy Air.
- American Airlines listed on Cl0p’s leak website, but the real target was Envoy Air.
- Allegedly stolen data from Envoy totals more than 26 GB, but sensitive data remains unscathed.
- Other victims include Harvard University and University of the Witwatersrand.
- Oracle working on patching vulnerabilities, including a zero-day exploit.
