The Washington Post reported that it was one of the victims of a hacking campaign linked to Oracle’s line of enterprise software applications.
Reuters first was mentioned the news on Friday, citing a statement from the newspaper saying it was affected “by the breach of the Oracle E-Business Suite platform.”
A spokesperson for the Post did not immediately respond to TechCrunch’s request for comment.
When reached by email, Oracle spokesman Michael Egbert referred TechCrunch to it two consulting services who previously posted and did not answer our questions.
Last month, Google said the Clop ransomware gang was targeting companies after exploiting multiple vulnerabilities in Oracle’s E-Business Suite software, which companies use for their business operations, storing their HR records and other sensitive data.
The exploits allowed hackers to steal customer business data and employee records from more than 100 companies, according to Google.
The hackers’ campaign began in late September when company executives reported receiving extortion emails sent from email addresses previously associated with the Clop gang, claiming the hackers had stolen large amounts of sensitive internal business data and personal employee information from compromised Oracle systems.
Anti-ransomware firm Halcyon told TechCrunch at the time that the hackers demanded an executive at an affected company pay $50 million in ransom.
Klopp on Thursday he claimed on its website that it had hacked the Washington Post, claiming the company “ignored their security,” language the Clop gang commonly uses when the victim doesn’t pay the hackers.
It is not uncommon for ransomware or extortion gangs like Clop to release their victims’ names and stolen files as a pressure tactic, which may indicate that the victim has not negotiated a payment with the gang or that the negotiation has fallen through.
Several other organizations have confirmed that they are affected by the Oracle E-Business hacks, such as Harvard University and Subsidiary of American Airlines Envoy.
