Oracle EBS hack compromises auto parts firm LKQ

Major U.S. automotive alternative and specialty parts provider LKQ Corporation has disclosed having data from over 9,000 individuals pilfered as part of the sweeping Oracle E-Business Suite attack by the Clop ransomware operation, reports SecurityWeek.

Affected by the incident were information belonging to sole proprietor suppliers, including their Employer Identification Numbers and Social Security numbers, according to an LKQ breach notification letter filed with the Office of the Maine Attorney General. No other LKQ systems have been impacted as a result of the intrusion. LKQ, whose Canadian business unit was disrupted by a cyberattack last year, has yet to acknowledge Clop's leak of terabytes of data allegedly stolen from its EBS instance.

While over 100 organizations, including Mazda, Cox Enterprises, Logitech, Canon, and multiple U.S. universities, were already claimed to have been compromised in the Oracle EBS hacking campaign, many have yet to publicly confirm the breach.