Oracle Customers Face Extortion Emails: Is Your E-Business Suite Vulnerable?
Oracle customers are receiving extortion emails, and the software giant’s investigation suggests attackers may have exploited known vulnerabilities. The emails, allegedly from the Cl0p cybercrime group, claim to have stolen sensitive information from Oracle’s E-Business Suite users. Oracle urges vigilance and has addressed these issues in their July 2025 Critical Patch Update.

Hot Take:
Ah, Oracle… the gift that keeps on giving for cybercriminals. It’s like when you realize your front door has been wide open for the last month and someone just left a note saying, “Nice TV, shame if something happened to it.” Looks like Oracle’s technology is so cutting edge that even the bad guys can’t resist giving it a spin!
Key Points:
- Oracle’s E-Business Suite customers are receiving extortion emails from alleged cybercriminals.
- The Cl0p and FIN11 groups are suspected of being behind these extortion attempts.
- Vulnerabilities in Oracle’s software, supposedly patched in July 2025, may have been exploited.
- Nine patches were specifically for E-Business Suite, with three being remotely exploitable.
- Oracle had previously suffered a data breach from its legacy cloud environment.
Already a member? Log in here