Oracle Cloud login servers breached: ~6M SSO/LDAP records offered for sale
Teaser from the source
A hacker using the name rose87168 claimed in March 2025 to have stolen about 6 million SSO and LDAP records from Oracle Cloud login servers. Oracle first denied an OCI breach, then told customers privately that two obsolete servers (reportedly Oracle Cloud Classic / Gen 1) were accessed, exposing usernames and hashed or encrypted passwords.
This is the RSS-feed teaser. Read the full article at the original source.
Read at pwn.watchMore on breached
Other news entries
- BAE Says No Data Extracted in Incident Hitting Bankruptcy CourtsNewsSecurityWeek
- Japan's GMO Offers $1 Million Bounty to Catch Hackers Behind FX Trading Cloud BreachNewsThe Hacker News
- Amplitude analytics security incident exposes Coinbase customer contact dataBreachpwn.watch
- Japan's GMO urges customers to shut down PCs amid ransomware threatNewsBleepingComputer
- Former pentester used ARTEX AI to steal 8.2 million data recordsNewsBleepingComputer
- Capcom confirms data breach affecting 11.7 million accountsNewsBleepingComputer
- Luanti ContentDB breached: attacker had server access Oct 22-26, emails, password hashes and uploads exposedBreachpwn.watch
- TiDB Breach Exposes Flawed Cloud Security AssumptionsNewsDark Reading
Source: https://pwn.watch/i/oracle-cloud-classic-login-breach-march-2025
ID