Informational
Advisory: Oracle Cloud Data Breach
CVE(N)
N/A
PRODUIT(S)
Sophos Central
Mis à jour
2025 Mar 23
Version de l'article
2
Publié
2025 Mar 23
ID de publication
sophos-sa-20250321-oracle-cloud-data-breach
Solution alternative
No
Overview
On 21 March 2025, a security breach was reported by CloudSEK’s XVigil discovered a threat actor, “rose87168” claiming to have stolen 6 million records from Oracle Clouds SSO and LDAP systems affecting 140,000 tenants.
No evidence that Sophos is impacted has been identified.
Related information
Sophos Responsible Disclosure Policy
To learn about Sophos security vulnerability disclosure policies and publications, see the Responsible Disclosure Policy.