Hack or no hack? Oracle denies theft of 6 million records (update)

Update 3:45 PM: We have learned from CloudSEK that Oracle has indeed been hacked, contrary to Oracle’s claims. CloudSEK states the following:

“Our threat intelligence team has uncovered conclusive evidence validating the threat actor’s claims — including production-level exposure of Oracle Cloud SSO endpoints and real customer data in the leaked samples.”

CloudSEK’s investigation, detailed in its full report, began on March 21. It is now clear that the…