Ransomware Group Allegedly Breaches Oracle’s E-Business Suite

A concerning extortion campaign has emerged, targeting Oracle E-Business Suite (EBS) customers. Emails claiming unauthorized access to EBS data have alarmed many company executives. Oracle has confirmed instances of such extortion attempts, urging organizations to apply the Critical Patch Update from July 2025 and tighten security defenses.

CFOs and CISOs are under increased pressure, as these attacks threaten data security, corporate reputation, and the continuity of essential processes like finance, supply chain, and customer management. Understanding and responding swiftly to these threats is critical for maintaining the integrity of business operations.

Key Insights on the Extortion Campaign

The Oracle EBS is an essential tool powering the operations of large firms—it’s responsible for vital financial, supply chain, and CRM tasks. Even if the claims from the ransomware group are unsubstantiated, they can still lead to legal and operational challenges for affected companies. Despite Google reporting the campaign as “high volume,” they haven’t confirmed any data breaches. Oracle stresses the urgent need for users to install the July 2025 patch, although no data theft has been verified.

Recommended Actions for EBS Administrators

To mitigate risks, EBS administrators should focus on these critical steps:

• Verify Patches: Keep the EBS system current with Oracle’s updates. Document all updates thoroughly.
• Enhance Security Protocols: Update Single Sign-On tokens, enforce Multi-Factor Authentication, and examine privileged access for irregularities.
• Review Third-Party Integrations: Re-authorize and monitor third-party APIs for anomalies, since they pose potential vulnerabilities.
• Handle Extortion Emails Carefully: Report any suspicious communications to security and legal teams and preserve them for further investigation.
• Conduct a Tabletop Exercise: Within days, simulate ERP compromises to prepare for potential threats. This includes mapping data and access points, and preparing communication plans.

Proactive measures like these are key for EBS administrators seeking to fortify their systems against evolving cyber threats.

Stay informed, stay secure. For continuous updates and insights, connect with TechInformed.

Ready to take data security seriously?

Discover how Qsentinel can protect your organization against ransomware, enforce true data sovereignty, and stay ahead of the quantum threat. Their purpose-built workspace is designed for exactly that.

👉 Check out Qsentinel now and secure your future.