Post

Oracle has a serious, customer impacting security incident playing out in Oracle Classic, a cloud SaaS service they manage. They're attempting to deny it by saying there's no problem in "Oracle Cloud", which is wordplay. doublepulsar.com/oracle-attem...

I think this one may be one for the history books as it's a breach of customer data at a cloud provider where they've tried to hide the evidence and wordsmith around it - I can't recall anything like this.

Oracle are reportedly in the running to take over TikTok over security concerns, and the deadline is this Saturday. Risking running head first into a PR disaster on Oracle Cloud at the same time is certainly a choice rather than just being honest and transparent about what happened.

If you want to see Oracle trying to cover up a breach, they erased one URL from archive.org but forgot to do the other one: web.archive.org/web/20250301...

Multiple Oracle cloud customers have reached out to me to say Oracle have now confirmed a breach of their services. They are only doing so verbally, they will not write anything down, so they’re setting up meetings with large customers who query.

This Oracle thing keeps getting more and more wild, I've never seen a response so bad from a large org. They're throwing their own security staff under the bus by having them face customers, rather than the corporation actually take responsibility.

Oracle didn’t respond to Heise (and I understand a number of large outlets) when asked about Oracle Cloud Classic. www.heise.de/en/news/Data...

Oracle org chart

A class action lawsuit has been filed against Oracle over a data breach at Oracle Health, which Oracle has not acknowledged in public storage.courtlistener.com/recap/gov.us...

Why cloud providers need to be transparent.

Reuters and Bloomberg confirm my blog, that’s there’s a security incident going on at Oracle cloud. Oracle are still declining to comment, after lying about on the record to media. www.reuters.com/technology/c...

“The stolen data included Oracle customer log-in credentials from as recently as 2024” This would be Oracle Classic, aka Gen1. I’ve been told the systems were left online after migration.. unpatched. Oracle are trying to play legacy angle - but what else was stolen? What else did the attacker do?