Oracle EBS hack impacts over 10K GlobalLogic workers

BleepingComputer reports that Hitachi Group's digital engineering services firm GlobalLogic had information from 10,471 current and former employees exfiltrated following the sweeping Oracle E-Business Suite zero-day attacks.

Attackers who accessed GlobalLogic's Oracle platform between July and August were able to pilfer personnel's HR information, including their names, addresses, phone numbers, emergency contacts, email addresses, birthdates and countries of birth, Social Security numbers and other tax identifiers, passport details, salary information, and bank account details, said GlobalLogic in a breach notification filed with Maine regulators.

"This incident did not target or impact GlobalLogic's systems outside our Oracle platform, and, based on industry reports, we are one of many Oracle customers believed to have been impacted," the firm added.

While no further details regarding the attackers were provided, Oracle EBS intrusions which were confirmed to have hit The Washington Post, Envoy Air, and Harvard University have been attributed to the Clop ransomware operation. Dozens of organizations may have been impacted by the attacks, according to Google Threat Intelligence Group's John Hultquist.