Michelin Confirms Data Breach Linked to Oracle EBS Attack

The company said its teams promptly conducted a thorough investigation and determined that an Oracle EBS zero-day was exploited in the attack.“Thanks to Michelin’s expertise and processes in the matter, all the corrective actions were taken at the appropriate time and were totally effective. The situation is now fixed,” the spokesperson said.The company has confirmed that the hackers accessed some files, but said only “a small, localized, volume of data with no sensitive or technical IT information was affected by the incident”.Michelin pointed out that no ransomware was involved in the attack and that there has been no impact on its global systems.“Please be sure that the safety of the data and services of our customers and partners is of utmost importance to us,” the spokesperson said.The cybercriminals have made public more than 315GB of archives allegedly containing files stolen from Michelin.SecurityWeekhas not downloaded the leaked data, but a brief metadata and file tree analysis indicates that at least some of the files indeed originate from an Oracle EBS environment.Madison Square Garden alsoconfirmedrecently that it was targeted in the Oracle EBS campaign. The admission came months after the hackers leaked more than 210GB of archives containing files allegedly stolen from the company.Related:Auto Parts Giant LKQ Confirms Oracle EBS BreachRelated:3.5 Million Affected by University of Phoenix Data BreachRelated:Korean Air Data Compromised in Oracle EBS Hack

“Thanks to Michelin’s expertise and processes in the matter, all the corrective actions were taken at the appropriate time and were totally effective. The situation is now fixed,” the spokesperson said.The company has confirmed that the hackers accessed some files, but said only “a small, localized, volume of data with no sensitive or technical IT information was affected by the incident”.Michelin pointed out that no ransomware was involved in the attack and that there has been no impact on its global systems.“Please be sure that the safety of the data and services of our customers and partners is of utmost importance to us,” the spokesperson said.The cybercriminals have made public more than 315GB of archives allegedly containing files stolen from Michelin.SecurityWeekhas not downloaded the leaked data, but a brief metadata and file tree analysis indicates that at least some of the files indeed originate from an Oracle EBS environment.Madison Square Garden alsoconfirmedrecently that it was targeted in the Oracle EBS campaign. The admission came months after the hackers leaked more than 210GB of archives containing files allegedly stolen from the company.Related:Auto Parts Giant LKQ Confirms Oracle EBS BreachRelated:3.5 Million Affected by University of Phoenix Data BreachRelated:Korean Air Data Compromised in Oracle EBS Hack

The company has confirmed that the hackers accessed some files, but said only “a small, localized, volume of data with no sensitive or technical IT information was affected by the incident”.Michelin pointed out that no ransomware was involved in the attack and that there has been no impact on its global systems.“Please be sure that the safety of the data and services of our customers and partners is of utmost importance to us,” the spokesperson said.The cybercriminals have made public more than 315GB of archives allegedly containing files stolen from Michelin.SecurityWeekhas not downloaded the leaked data, but a brief metadata and file tree analysis indicates that at least some of the files indeed originate from an Oracle EBS environment.Madison Square Garden alsoconfirmedrecently that it was targeted in the Oracle EBS campaign. The admission came months after the hackers leaked more than 210GB of archives containing files allegedly stolen from the company.Related:Auto Parts Giant LKQ Confirms Oracle EBS BreachRelated:3.5 Million Affected by University of Phoenix Data BreachRelated:Korean Air Data Compromised in Oracle EBS Hack

Michelin pointed out that no ransomware was involved in the attack and that there has been no impact on its global systems.“Please be sure that the safety of the data and services of our customers and partners is of utmost importance to us,” the spokesperson said.The cybercriminals have made public more than 315GB of archives allegedly containing files stolen from Michelin.SecurityWeekhas not downloaded the leaked data, but a brief metadata and file tree analysis indicates that at least some of the files indeed originate from an Oracle EBS environment.Madison Square Garden alsoconfirmedrecently that it was targeted in the Oracle EBS campaign. The admission came months after the hackers leaked more than 210GB of archives containing files allegedly stolen from the company.Related:Auto Parts Giant LKQ Confirms Oracle EBS BreachRelated:3.5 Million Affected by University of Phoenix Data BreachRelated:Korean Air Data Compromised in Oracle EBS Hack

“Please be sure that the safety of the data and services of our customers and partners is of utmost importance to us,” the spokesperson said.The cybercriminals have made public more than 315GB of archives allegedly containing files stolen from Michelin.SecurityWeekhas not downloaded the leaked data, but a brief metadata and file tree analysis indicates that at least some of the files indeed originate from an Oracle EBS environment.Madison Square Garden alsoconfirmedrecently that it was targeted in the Oracle EBS campaign. The admission came months after the hackers leaked more than 210GB of archives containing files allegedly stolen from the company.Related:Auto Parts Giant LKQ Confirms Oracle EBS BreachRelated:3.5 Million Affected by University of Phoenix Data BreachRelated:Korean Air Data Compromised in Oracle EBS Hack

The cybercriminals have made public more than 315GB of archives allegedly containing files stolen from Michelin.SecurityWeekhas not downloaded the leaked data, but a brief metadata and file tree analysis indicates that at least some of the files indeed originate from an Oracle EBS environment.Madison Square Garden alsoconfirmedrecently that it was targeted in the Oracle EBS campaign. The admission came months after the hackers leaked more than 210GB of archives containing files allegedly stolen from the company.Related:Auto Parts Giant LKQ Confirms Oracle EBS BreachRelated:3.5 Million Affected by University of Phoenix Data BreachRelated:Korean Air Data Compromised in Oracle EBS Hack

SecurityWeekhas not downloaded the leaked data, but a brief metadata and file tree analysis indicates that at least some of the files indeed originate from an Oracle EBS environment.Madison Square Garden alsoconfirmedrecently that it was targeted in the Oracle EBS campaign. The admission came months after the hackers leaked more than 210GB of archives containing files allegedly stolen from the company.Related:Auto Parts Giant LKQ Confirms Oracle EBS BreachRelated:3.5 Million Affected by University of Phoenix Data BreachRelated:Korean Air Data Compromised in Oracle EBS Hack

Madison Square Garden alsoconfirmedrecently that it was targeted in the Oracle EBS campaign. The admission came months after the hackers leaked more than 210GB of archives containing files allegedly stolen from the company.Related:Auto Parts Giant LKQ Confirms Oracle EBS BreachRelated:3.5 Million Affected by University of Phoenix Data BreachRelated:Korean Air Data Compromised in Oracle EBS Hack

Related:Auto Parts Giant LKQ Confirms Oracle EBS BreachRelated:3.5 Million Affected by University of Phoenix Data BreachRelated:Korean Air Data Compromised in Oracle EBS Hack

Related:3.5 Million Affected by University of Phoenix Data BreachRelated:Korean Air Data Compromised in Oracle EBS Hack

Source: SecurityWeek