// UNCLASSIFIED // CLEARED FOR PUBLIC RELEASE //
FILE BRC-newsDTG 0600Z
ColdRecon / Breach Radar / Oracle
Breach Record

Oracle

DISCLOSED 2025-11-21 · UNPATCHED CVE · RANSOMWARE

Oracle was allegedly breached by the Clop ransomware group exploiting a zero-day vulnerability in Oracle E-Business Suite. The attack vector is an unpatched vulnerability. No details on exposed records or data classes were provided.

The record

What we know

Disclosed
2025-11-21
Attack vector
Unpatched Cve
Sector
technology
Domain
oracle.com
RANSOMWARE
Sources

Cited reporting

↗ cyberpress.org (2025-11-21)
Similar vector · recent

Other unpatched cve breaches on file

Trump Mobile · 2026-05-29 LexisNexis Legal & Professional · 2026-03-18 multiple organizations (Michelin, Mazda, Canon, Logitech, Harvard University, etc.) · 2025-11-28 Cox Enterprises · 2025-11-28 Entrust · 2025-11-14 The Washington Post · 2025-11-13 managed service provider · 2025-05-28 Union Health · 2025-05-20

This page is the permanent ColdRecon entry for the Oracle disclosure. It updates if new public reporting emerges. All tracked breaches →

Oracle just lived through this. Your next prospect doesn't have to.

ColdRecon turns every disclosed breach into a daily intelligence brief from the seller's seat — normalized to the factors that move a deal, written in the Handler's voice. Request clearance and the first lands tomorrow at 0600.

Request Clearance →