Cybersecurity News in Asia

RECENT STORIES:

SEGA moves faster with flow-based network monitoring
Data review finds first-party fraud most common in one firm’s global c...
NEC Indonesia Introduces Integrated Command Control Centre for Industr...
Six-month snapshot of state-sponsored threats shows continued APT resi...
Cohesity Strengthens Resilience of Large, Mission-Critical MongoDB Wor...
Closing the gap in Zero Trust implementation: What you need to conside...
LOGIN REGISTER
CybersecAsia
  • Features
    • Featured

      Solving data protection challenges in an era of cloud and AI

      Solving data protection challenges in an era of cloud and AI

      Wednesday, June 18, 2025, 11:12 AM Asia/Singapore | Data Protection, Features
    • Featured

      Will your organization’s defenses be breached due to your suppliers’ weak cybersecurity?

      Will your organization’s defenses be breached due to your suppliers’ weak cybersecurity?

      Thursday, May 29, 2025, 5:04 PM Asia/Singapore | Features
    • Featured

      How the UAE proactively protects its digital economy

      How the UAE proactively protects its digital economy

      Monday, May 19, 2025, 2:16 PM Asia/Singapore | Features
  • Opinions
  • Tips
  • Whitepapers
  • Awards 2025
  • Directory
  • E-Learning

Select Page

LOGIN REGISTER
  • Features
    • Featured

      Solving data protection challenges in an era of cloud and AI

      Solving data protection challenges in an era of cloud and AI

      Wednesday, June 18, 2025, 11:12 AM Asia/Singapore | Data Protection, Features
    • Featured

      Will your organization’s defenses be breached due to your suppliers’ weak cybersecurity?

      Will your organization’s defenses be breached due to your suppliers’ weak cybersecurity?

      Thursday, May 29, 2025, 5:04 PM Asia/Singapore | Features
    • Featured

      How the UAE proactively protects its digital economy

      How the UAE proactively protects its digital economy

      Monday, May 19, 2025, 2:16 PM Asia/Singapore | Features
  • Opinions
  • Tips
  • Whitepapers
  • Awards 2025
  • Directory
  • E-Learning
News

Cloud giant’s negligence and botched crisis response amplify monumental data breach fallout

By L L Seow | Tuesday, April 15, 2025, 10:58 AM Asia/Singapore

Cloud giant’s negligence and botched crisis response amplify monumental data breach fallout

After finally admitting to the breach, a tech titan’s mishandled public responses now fuels multiple lawsuits and erodes inflated industry trust.

On 25 March 2025, CybersecAsia.net had reported that a cloud data breach involving 6m records from Oracle Cloud had been disputed by the latter firm despite strong anecdotal evidence and analyses by IT experts.

Weeks into the ensuing investigations, we have seen how the saga has unfolded.

On 10 Apr 2025, Techzine.eu had covered how Oracle has confirmed the data breach.

Here is a summary of the latest developments to date:

  • Breach acknowledgment: By 7 April 2025, Oracle had finally admitted to a compromise in its public cloud, reversing earlier denials, after a hacker, “rose87168,” had initially claimed responsibility.
  • Attack details: The intrusion had targeted two “obsolete” servers running unpatched Oracle Fusion Middleware, exploiting CVE-2021-35587, a known vulnerability from 2021.
  • Data stolen: Approximately 6m records had been exfiltrated, including encrypted SSO/LDAP passwords, security keys, and tenant data, impacting over 140,000 tenants.
  • Server neglect: The compromised servers, last updated in 2014, were still online as of February 2025, highlighting Oracle’s failure to patch critical systems.
  • Ramifications:
    • Legal fallout: A class-action lawsuit by a Michael Toikach is accusing Oracle of inadequate security, potentially costing clients time and money.
    • Reputational damage: Delayed transparency eroded trust, drawing parallels to the SolarWinds attack.
    • Security overhaul needed: Expert observers have noted that the serious breach underscores Oracle’s need for better patch management and system monitoring.
    • Industry impact: Experts warn this could be a “watershed moment” for cloud security, urging third-party risk awareness.

The Oracle cloud breach saga, evolving from denial to admission, exposes critical vulnerabilities in even the most established tech giants. As more legal battles loom, and regulatory scrutiny intensifies, this monumental breach and negligence of good crises management basics underscores the urgent need for cloud customers’ proactive risk management and vigilance in third-party dependencies.

As cloud reliance grows, such wake-up calls demand that businesses and providers alike prioritize resilience to safeguard data in an ever-evolving threat landscape.

Share:

PreviousProtecting against PDF cyber threats: Best practices for organizations and staff
NextMSPs the first line of defense for APAC SMEs

Related Posts

How to future-proof cybersecurity when the future is so unpredictable?

How to future-proof cybersecurity when the future is so unpredictable?

Friday, August 12, 2022

What do trends in one Q1 2024 cyber landscape report translate to?

What do trends in one Q1 2024 cyber landscape report translate to?

Tuesday, April 16, 2024

What three business risks hogged the minds of APAC and global business leaders?

What three business risks hogged the minds of APAC and global business leaders?

Thursday, November 23, 2023

Three quarters of IT and cybersecurity teams not aligned: study

Three quarters of IT and cybersecurity teams not aligned: study

Friday, February 28, 2020

Leave a reply Cancel reply

You must be logged in to post a comment.

Voters-draw/RCA-Sponsors

Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
previous arrow
next arrow

CybersecAsia Voting Placement

Gamification listing or Participate Now

PARTICIPATE NOW

Vote Now -Placement(Google Ads)

Top-Sidebar-banner

Whitepapers

  • 2024 Insider Threat Report: Trends, Challenges, and Solutions

    2024 Insider Threat Report: Trends, Challenges, and Solutions

    Insider threats continue to be a major cybersecurity risk in 2024. Explore more insights on …Download Whitepaper
  • AI-Powered Cyber Ops: Redefining Cloud Security for 2025

    AI-Powered Cyber Ops: Redefining Cloud Security for 2025

    The future of cybersecurity is a perfect storm: AI-driven attacks, cloud expansion, and the convergence …Download Whitepaper
  • Data Management in the Age of Cloud and AI

    Data Management in the Age of Cloud and AI

    In today’s Asia Pacific business environment, organizations are leaning on hybrid multi-cloud infrastructures and advanced …Download Whitepaper
  • Mitigating Ransomware Risks with GRC Automation

    Mitigating Ransomware Risks with GRC Automation

    In today’s landscape, ransomware attacks pose significant threats to organizations of all sizes, with increasing …Download Whitepaper

Middle-sidebar-banner

Case Studies

  • St Luke’s ElderCare enhances operations and capabilities through a centralized secure, scalable network

    St Luke’s ElderCare enhances operations and capabilities through a centralized secure, scalable network

    With only a small IT team, the digital transformation has united operations across 30 locations, …Read more
  • Automating border control and security with facial recognition technology

    Automating border control and security with facial recognition technology

    Indonesia Immigration & Seaport Authorities enhances security and speeds up border control queues at Batam …Read more
  • Securing wealth advisory services without unnecessary friction: Endowus

    Securing wealth advisory services without unnecessary friction: Endowus

    The wealth advisory platform demonstrates its non-negotiable commitment to a robust security posture through partnering …Read more
  • LifeTech group sets up next-gen security operations center in Malaysia

    LifeTech group sets up next-gen security operations center in Malaysia

    By partnering with a unified cybersecurity platform, the firm will be offering cost-effective advanced SOC …Read more

Bottom sidebar

  • Our Brands
  • DigiconAsia
  • MartechAsia
  • Home
  • About Us
  • Contact Us
  • Sitemap
  • Privacy & Cookies
  • Terms of Use
  • Advertising & Reprint Policy
  • Media Kit
  • Subscribe
  • Manage Subscriptions
  • Newsletter

Copyright © 2025 CybersecAsia All Rights Reserved.