Oracle Customers Face Extortion Emails: Is Your E-Business Suite Vulnerable?

Oracle customers are receiving extortion emails, and the software giant’s investigation suggests attackers may have exploited known vulnerabilities. The emails, allegedly from the Cl0p cybercrime group, claim to have stolen sensitive information from Oracle’s E-Business Suite users. Oracle urges vigilance and has addressed these issues in their July 2025 Critical Patch Update.

Pro Dashboard

Hot Take:

Ah, Oracle… the gift that keeps on giving for cybercriminals. It’s like when you realize your front door has been wide open for the last month and someone just left a note saying, “Nice TV, shame if something happened to it.” Looks like Oracle’s technology is so cutting edge that even the bad guys can’t resist giving it a spin!

Key Points:

  • Oracle’s E-Business Suite customers are receiving extortion emails from alleged cybercriminals.
  • The Cl0p and FIN11 groups are suspected of being behind these extortion attempts.
  • Vulnerabilities in Oracle’s software, supposedly patched in July 2025, may have been exploited.
  • Nine patches were specifically for E-Business Suite, with three being remotely exploitable.
  • Oracle had previously suffered a data breach from its legacy cloud environment.

Membership Required

 You must be a member to access this content.

View Membership Levels
Already a member? Log in here
The Nimble Nerd
Confessional Booth of Our Digital Sins

Okay, deep breath, let's get this over with. In the grand act of digital self-sabotage, we've littered this site with cookies. Yep, we did that. Why? So your highness can have a 'premium' experience or whatever. These traitorous cookies hide in your browser, eagerly waiting to welcome you back like a guilty dog that's just chewed your favorite shoe. And, if that's not enough, they also tattle on which parts of our sad little corner of the web you obsess over. Feels dirty, doesn't it?