Google says 'dozens of organizations' affected by Oracle-linked hacking campaign

By Raphael Satter WASHINGTON (Reuters) -Google said on Thursday that dozens of companies have been affected by an ambitious hacking campaign that targeted Oracle's suite of business products, an early assessment that could portend wide-ranging damage. Google, a unit of Alphabet, said in a statement that "mass amounts of customer data" were stolen in an operation it said may have begun as early as three months ago. "This level of investment suggests the threat actor(s) responsible for the initial intrusion likely dedicated significant resources to pre-attack research," the email said. Google said the hackers targeted Oracle's E-Business Suite of applications, which Oracle clients use to manage customers, suppliers, manufacturing, logistics, and other business processes. Oracle did not immediately return an email seeking comment. Previouisly, the company had confirmed that there was extortion activity aimed at its clients. Google noted in a blog post on Thursday that the group believed to be at the center of the intrusions, CL0P, has a long history of wide-ranging compromises against third party software or service providers. "This latest campaign targeting Oracle EBS marks a continuation of this successful and high-impact operational model," the blog said. CL0P did not immediately respond to an email seeking comment. Previously, the hacker group said it would soon be clear that Oracle had "bugged up their core product." (Reporting by Raphael Satter; Editing by David Gregorio)

(The article has been published through a syndicated feed. Except for the headline, the content has been published verbatim. Liability lies with original publisher.)