EMC Water: files obtained via Oracle EBS flaw
A previously unknown Oracle EBS vulnerability was used to obtain files from the company’s EBS application.
Suchen Sie nach Unternehmen, Land, Branche, Jahr und Angriffsmethode. Prüfen Sie betroffene Daten, Umfang, Bestätigungsstatus, Maßnahmen und Quellen.
A previously unknown Oracle EBS vulnerability was used to obtain files from the company’s EBS application.
On October 9, 2025, Wisner Baum detected unusual network activity; the investigation found an unauthorised third party accessed the network between October 8 and 9, 2025 and may have obtained certain files.
Around September 16, 2025, a staff member forwarded a suspicious email to the external provider’s help desk, was told the link was clean, and opened it, leading to compromise; the attacker had full access to the email account, including all folders and attached documents.
Around December 12, 2025, a third party attempted to infiltrate the network and personal information may have been accessed.
MACT experienced an incident that disrupted its IT systems; the investigation found an unauthorised party accessed some files on its systems between November 12 and 20, 2025.
On February 27, 2025, Clawson became aware of suspicious network activity; the investigation found certain files may have been accessed or copied without authorisation between February 27 and 28, 2025.
Around August 7, 2025, DBS identified suspicious activity in its email environment; the investigation found an unauthorised actor accessed the email system and potentially downloaded certain emails and files.
Possible data leak: A network compromise identified on December 8, 2025 could have compromised personal information.
On June 30, 2025, IOA discovered certain internal systems had been affected by a security incident; the investigation found an unauthorised party gained access through a phishing email and data may have been accessed or acquired between June 25 and 30, 2025.
A December 14, 2025 credential-stuffing attack may have accessed user accounts.
Information in systems was subject to unauthorised access or acquisition beginning November 27, 2025; personal data may have been affected.
Possible data leak: Investigation of unusual activity around August 19, 2025 found information suggesting an unknown actor accessed the network.
Around September 26, 2025, SPCorp experienced unauthorised access to its network; after investigation and document review it determined on January 7, 2026 that personal information may have been accessed and/or acquired.
On October 29, 2025, a limited amount of data, including names and dates of birth, was downloaded from a cloud application.
The network was accessed from about August 28 to September 12, 2025; personal data may have been accessed or acquired.
An unauthorised party accessed certain Monroe University systems between December 9 and 23, 2024 and acquired copies of some network files; on September 30, 2025 the university determined they contained personal information.
On December 12, 2025, SAFE Credit Union experienced an incident that led to the unintended disclosure of certain member information.
The firm experienced a network security incident on January 31, 2025; forensic investigation found an unauthorised third party may have accessed certain personal information.
GSPlatformCo detected unauthorised access to data hosted on one of the systems it used to store customer information; the data was a snapshot from April 2025, and the company says its current environment is secure.
On August 16, 2025, the company observed unusual network activity; the investigation found certain files were potentially accessed without authorisation between July 25 and August 26, 2025.