Oracle Confirms Cloud Customer Data Exposed in Breach
Oracle has notified customers of unauthorized access to legacy cloud infrastructure, with authentication data and tenant information potentially exposed.
Oracle has begun notifying enterprise customers of a data breach affecting its legacy Oracle Cloud Classic infrastructure. The company confirmed that an attacker accessed authentication-related data, including encrypted SSO credentials and LDAP entries.
The breach affects tenants who used the legacy Gen 1 Cloud platform. Oracle Gen 2 Cloud (OCI) infrastructure is not affected.
Affected customers have been contacted directly. Organizations using Oracle Cloud Classic should rotate all credentials, audit access logs, and review any systems that used LDAP or SSO authentication against the affected environment.