Michelin Confirms Data Breach from Oracle EBS Cyberattack

Michelin has confirmed a data breach linked to the Clop ransomware gang's exploitation of vulnerabilities in Oracle E-Business Suite. The attack resulted in the compromise of localized data, although no sensitive or technical IT details were exposed. Clop previously leaked over 315 GB of data purportedly from Michelin's systems. The breach follows similar incidents affecting over 100 organizations, including Madison Square Garden, which reported a data leak of more than 210 GB. Michelin stated that all corrective actions were effectively implemented, and the situation is now resolved. The breach was attributed to a zero-day vulnerability in Oracle E-Business Suite, indicating a significant risk for organizations using this software. The company emphasized that its global systems remained unaffected by the attack.

Key Points: • Michelin confirmed a data breach linked to the Clop ransomware gang. • The breach involved exploitation of a zero-day vulnerability in Oracle E-Business Suite. • Over 315 GB of data was leaked, but Michelin stated no sensitive data was compromised.