Washington Post’s Oracle E-Suite breach exposes data on more than 9,000 employees and contractors

The Washington Post, one of America’s most respected news organizations, has reported a data breach involving its Oracle E-Suite system affecting 9,720 current and former employees and contractors.

The incident, classified as an external system breach (hacking), underscores the ongoing threats faced by media companies that rely on enterprise resource planning (ERP) systems to manage vast repositories of sensitive employee information.

Violation details

The security incident allegedly occurred on July 10, 2025, but was not discovered until October 27, 2025, more than three months later.

According to the official breach notification submitted to regulators, the attack targeted the Washington Post’s Oracle E-Suite environment.

Hackers accessed information by combining people’s names with other personal identifiers, increasing the risk of identity theft and related fraud for affected individuals.

Since a total of 9,720 people are affected,…