The Washington Post confirms nearly 10,000 people’s data was stolen from their Oracle environment

The Washington Post said it was also affected by the data theft and extortion campaign that targeted Oracle E-Business Suite customers and compromised human resources data from nearly 10,000 current and former employers and contractors.

The company was first alerted to the attack and launched an investigation when a “bad actor” contacted the media company on September 29, claiming he had gained access to the company’s Oracle applications, according to a report Data Breach Notification It was filed in Maine on Wednesday. The Washington Post later discovered that the attacker had access to his Oracle environment from July 10 to August 22.

The newspaper is part of it Dozens of Oracle customers Targeted by the Clop ransomware group, which exploited a Zero-day vulnerability affecting Oracle E-Business Suite to steal tons of data. Other confirmed victims include Envoy Air and GlobalLogic.

The Washington Post said it confirmed the extent of the data stolen during the Oct. 27 attack and found that personal…