Oracle has been the victim of a hacker attack with 6 million rows of data from 144,000 customers stolen, according to a report by Bleeping Computer. The data was sold on a black market site with the hackers asking Oracle to pay 100,000 XMR (~RM 97 million) to disclose the vulnerability used to make the system accessible.
Oracle denied that the Oracle Cloud system had been successfully penetrated by hackers, but several customers confirmed the authenticity of the stolen data. Among the stolen data were encrypted passwords, Java Keystore (JKS) files, key files and customer JPS manager keys.
The hackers said the system was successfully accessed 40 days ago. The hackers not only want to sell the data but also ask other hackers to help decrypt the passwords in the stolen databases.