Summary: Oracle has denied any security breach despite a hacker claiming to sell data from over 140,000 Oracle Cloud tenants, including encrypted passwords. A security firm suggests that the alleged data breach could stem from a known vulnerability in Oracle products, but Oracle maintains that there was no breach. The hacker’s claims raise questions about the authenticity of the data, as it is common for hackers to either fabricate leaks or exaggerate their access.
Affected: Oracle Corporation
Keypoints :
- A hacker claimed to sell data related to Oracle Cloud tenants, including six million lines of data.
- Oracle asserts there has been no breach and that affected credentials are not related to their systems.
- The hacker may have some data from Oracle Cloud or a third party, but there is also a possibility the leak is fabricated.
Source: https://www.securityweek.com/oracle-denies-cloud-breach-after-hacker-offers-to-sell-data/