The Oracle breach

Organisations affected through Oracle

1. NN Nissan North AmericaUSUnited States · TN · 25 June 2026 Social Security numbersFinancial account and card details 85people

   Nissan Americas uses Oracle PeopleSoft software to manage employee information, including payroll, tax administration, and other personnel records. Oracle has informed us that there was a cyber event and that the personnel records of hundreds of companies may have been obtained by so-called threat actors. notice letter

2. TE The Estee Lauder CompaniesUSUnited States · NY · 10 July 2026 Social Security numbersGovernment ID numbersHealth and medical information+4 31.9Kpeople

   a vulnerability in the Oracle E-Business Suite system which is used by the Estee Lauder Companies for HR management purposes notice letter

3. TW The Washington PostUSUnited States · DC · 13 July 2026 Social Security numbersGovernment ID numbersHealth insurance details+3 862Texas residents

   data security incident the Washington Post ("The Post") experienced that resulted from an unknown vulnerability in software we utilize from our vendor, Oracle notice letter

4. BB Bimbo Bakeries USA (Oracle)USUnited States · TX · 31 August 2026 Social Security numbersFinancial account and card detailsNames 46.1Kpeople

   Oracle's eBusiness Suite Application ("Oracle EBS") had a zero-day vulnerability that allowed unauthorized parties to exploit hundreds of Oracle customers EBS instances and access / exfiltrate data, including Bimbo Bakeries USA's ("BBU") Washington Attorney General

Counts are each organisation’s own and can overlap: one person can be a customer of several. An organisation joins this list only when a source names Oracle as the way its data was taken.