Oracle is denying claims that its cloud systems were breached after a hacker alleged they had stolen six million user records. The hacker, using the alias \u201crose87168,\u201d posted on dark web forums claiming they had accessed encrypted passwords, Single Sign-On (SSO) credentials, Java keystore files, and other sensitive configuration data from Oracle\u2019s cloud login servers.<\/p>\n
In a public statement, Oracle said, \u201cThere has been no breach of Oracle Cloud. The published credentials are not for the Oracle Cloud. No Oracle Cloud customers experienced a breach or lost any data.\u201d<\/p>\n
The hacker reportedly demanded 100,000 Monero (XMR)\u2014a privacy-focused cryptocurrency known for being difficult to trace\u2014in exchange for the data and instructions on how to fix the claimed vulnerability. After Oracle did not respond, the data was offered for sale. The hacker also invited companies to pay to have their employee records removed from the dataset before it was sold.<\/p>\n
The authenticity of the stolen data has not been independently verified. Oracle continues to insist that its systems remain secure and that no customer data has been compromised.<\/p>\n
However, Bleeping Computer<\/strong>, which first reported the story, was given a link showing a <\/p>\n Link to the .txt file<\/em><\/strong> https:\/\/web.archive.org\/web\/20250301161517\/http:\/login.us2.oraclecloud.com\/oamfed\/x.txt?x<\/p>\n","protected":false},"excerpt":{"rendered":" Oracle is denying claims that its cloud systems were breached after a hacker alleged they had stolen six million user records. The hacker, using the alias \u201crose87168,\u201d posted on dark web forums claiming they had accessed encrypted passwords, Single Sign-On (SSO) credentials, Java keystore files, and other sensitive configuration data from Oracle\u2019s cloud login servers. […]<\/p>\n","protected":false},"author":2,"featured_media":46824,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[16],"tags":[275],"class_list":["post-46823","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","tag-top-story"],"acf":[],"_links":{"self":[{"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/posts\/46823","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/comments?post=46823"}],"version-history":[{"count":1,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/posts\/46823\/revisions"}],"predecessor-version":[{"id":46825,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/posts\/46823\/revisions\/46825"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/media\/46824"}],"wp:attachment":[{"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/media?parent=46823"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/categories?post=46823"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/tags?post=46823"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}.txt<\/code> file uploaded to what appears to be Oracle\u2019s cloud servers. The outlet has asked Oracle to explain how the file was placed there without having access to the server. As of the time of publication, Oracle had not responded.<\/p>\n