Cloud Security, Supply chain

Toll of Oracle EBS zero-day attacks adds Allianz UK

Allianz Insurance has been a leader in fostering a DevSecOps culture. Today’s columnist, Matias Madou of Secure Code Warrior, offers advice on how to bring the AppSec and DevOps teams together to create a collaborative DevSecOps approach.

Major international insurance firm Allianz UK has disclosed that it was impacted by the widespread Oracle E-Business Suite zero-day attacks following the Clop ransomware group's claims of having compromised its subsidiary Liverpool Victoria, according to The Register.

Infiltration of Allianz UK's Oracle EBS instance allowed hackers to pilfer data from 80 current and 670 previous customers, said the insurer, which emphasized that none of its LV pension clients or systems were affected, contrary to Clop's assertions.

Additional details regarding the attacker were not provided by Allianz UK, which also noted the incident to be separate from the July breach of its U.S. subsidiary Allianz Life. Such a development comes after the Washington Post and Envoy Air, a subsidiary of American Airlines, confirmed having been affected by the wave of Oracle EBS intrusions last month.

Dozens of organizations are believed by the Google Threat Intelligence Group to have been infiltrated as a result of the attack campaign, which commenced in July.

An In-Depth Guide to Cloud Security

Get essential knowledge and practical strategies to fortify your cloud security.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy.

You can skip this ad in 5 seconds