Oracle, a leading cloud computing and software giant, has disclosed yet another cyberattack, marking its second security breach within a month. According to a Bloomberg report, a hacker infiltrated one of Oracle’s computer systems, gaining access to old client log-in credentials.
What Happened?
Sources familiar with the incident revealed that last month, an unidentified hacker attempted to sell stolen data from Oracle’s cloud servers. While Oracle has remained tight-lipped, the breach has raised concerns about cybersecurity vulnerabilities, especially in major technology firms.
According to reports, Oracle informed some customers that the Federal Bureau of Investigation (FBI) and cybersecurity firm CrowdStrike Holdings are actively investigating the breach. Additionally, the hacker allegedly demanded an extortion payment from Oracle in exchange for the stolen data.
How Serious is the Breach?
Oracle has assured its customers that the stolen data came from an outdated system that has been inactive for the past eight years. However, reports indicate that some of the compromised login credentials are from as recently as 2024, raising concerns about potential risks.
Although Oracle claims the stolen credentials pose minimal danger, cybersecurity experts warn that old log-in details can still be used in credential-stuffing attacks, where hackers test them across multiple platforms to gain unauthorized access.
Second Hack in a Month – A Troubling Pattern
This latest breach comes just weeks after Oracle notified some of its healthcare clients about another security incident. While the company has clarified that these two breaches are separate, the back-to-back cyberattacks highlight ongoing security challenges in cloud computing.
The rise in cyberattacks targeting enterprise software providers emphasizes the need for robust security measures. With hackers becoming increasingly sophisticated, even industry giants like Oracle are struggling to keep their systems secure.
What Customers Should Do

If you are an Oracle client, here’s what you can do to protect yourself:
- Change your passwords – If you’ve used the same credentials elsewhere, update them immediately.
- Enable multi-factored authentication (MFA) – Adding an extra layer of security can prevent unauthorized access.
- Monitor for suspicious activity – Keep an eye on login attempts and unusual transactions.
- Stay informed – Follow official Oracle security updates to ensure you’re aware of any new threats.
The Bigger Picture
Cybersecurity breaches like this serve as a wake-up call for businesses and individuals to strengthen their security practices. As cloud computing becomes more essential, companies must prioritize data protection to avoid becoming the next target.