Oracle legacy server hack leaks customer credentials
Allegations emerged that Oracle Cloud customer credentials had been stolen, and several customers confirmed that samples provided by the attacker matched their own data. The attacker claimed to have stolen data on 6 million users. Oracle later acknowledged a breach of legacy servers but denied that its flagship cloud platform, OCI, had been compromised.
Key facts
- Affected organization
- Oracle
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Credentials for 6 million users, according to the attacker
- Cause / method
- Hacking of legacy servers
- Location
- United States
If your data was exposed
Exposed dataUsernamePassword
- Change your password, and also change it on any other site where you use the same one. Turn on two-factor authentication if available.
Timeline
- The theft of 6 million records and a potential impact on 140,000 corporate customers were alleged, and Oracle denied a cloud breach.
- Several customers confirmed that samples provided by the attacker matched their actual data.
- A hacker linked to the Oracle Cloud intrusion threatened to sell the stolen data.
- Oracle acknowledged the hacking of legacy servers while denying a cloud breach.
- Oracle said OCI was secure, but the controversy continued.
23 related reports
- Oracle Cloud denies data breach claims of 6 million data files leak
- Oracle Cloud breach may impact 140,000 enterprise customers
- Part 2: Validating the Breach Oracle Cloud Denied – CloudSEK’s Follow-Up Analysis
- Alleged Oracle Cloud Supply Chain Attack: Six Million Records Stolen, 140K Companies Affected
- Researchers back claim of Oracle Cloud breach despite company’s denials
- Security Firms Say Evidence Seems to Confirm Oracle Cloud Hack
- Oracle customers confirm data stolen in alleged cloud breach is valid
- Oracle Health Data Breach Impacting US Healthcare Systems
- Oracle Health customers notified of data compromise, reports say
- Oracle Warns Health Customers of Patient Data Breach
- Hacker linked to Oracle Cloud intrusion threatens to sell stolen data
- Oracle Health server breach leads to hospital extortions, reports say
- US patient data reportedly stolen following Oracle Health breach
- Oracle Confirms Major Data Breach After Lawsuit Accused It of A Cover-Up
- Oracle Confirms Another Massive Data Breach, Customer Log-In Credentials Sold On Black Market
- Oracle Faces Mounting Criticism as It Notifies Customers of Hack
- Oracle Appears to Admit Breach of 2 'Obsolete' Servers
- Oracle says "obsolete servers" hacked, denies cloud breach
- Oracle admits breach of ‘obsolete servers,’ denies main cloud platform affected
- Oracle confirms data breach via outdated servers, denies cloud breach
- 오라클, ‘구형 서버’ 해킹 인정··· “OCI는 안전” 설명에 논란 여전
- The Oracle Breach Is Bigger Than You Think—5 Urgent Steps to Take Now
- KiloEX loses $7.5 million in oracle hack
Other incidents at Oracle
Oracle hack leads to data breach and extortion demands
A data breach occurred as a result of the Oracle hack. Oracle faced 11 related class action lawsuits in Texas. Extortion demands related to the hack continued afterward.
Related reports: 2 · last report →Oracle targeted in two cyberattacks, possible data breaches
Oracle was reportedly the target of two separate cyberattacks. The possibility of data breaches from each attack was raised.
Read on JD Supra ↗Oracle Health hack leaks patient data of about 20 million people
20MImpact: Patient data of about 20 million people
Oracle Health was hacked in 2025, leaking patient data. The US Federal Bureau of Investigation investigated the attack, and leaks affecting healthcare providers were later disclosed. The scale confirmed in October 2026 is about 20 million people.
Related reports: 12 · last report →
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.