Hackers Target Corporate Leaders With Fake Oracle Data Theft Claims: Google

Google has raised an alarm about a new wave of cyberattacks aimed at company executives. Hackers are sending extortion emails to corporate leaders claiming they have stolen sensitive data from Oracle business applications. The emails warn victims that the stolen information will be exposed if their demands are not met.

In a statement, Google confirmed that the attackers claim to be linked with the ransomware gang known as cl0p. According to the company, the hackers allege that they accessed data from the Oracle E-Business Suite, a widely used platform for managing business operations.

Hackers Target Corporate Leaders With Fake Oracle Data Theft Claims: Google

Google described the campaign as “high volume,” suggesting that many executives from different organisations are being targeted. However, the company has not disclosed how many people received these emails. It also declined to reveal further details about the attacks.

The tech giant stressed that it does not have enough evidence to confirm whether the hackers truly have the stolen data. “We do not currently have sufficient evidence to definitively assess the veracity of these claims,” Google said.

Oracle, whose systems were mentioned in the extortion emails, did not respond to requests for comment.

Cybersecurity experts have also weighed in on the situation. Cynthia Kaiser, who leads the Ransomware Research Center at Halcyon, explained that her firm has tracked similar extortion campaigns. She said the ransom demands in such cases often range from millions of dollars to as high as $50 million.

Kaiser added that while the hackers claim to be part of the cl0p gang, the connection remains unclear. “There’s so much overlap among all these groups, and there are copycats across the ecosystem,” she noted. This means that other actors may be posing as cl0p to spread fear and increase their chances of payment.

Meanwhile, the cl0p group itself has provided little clarity. In an email response to Reuters, members of the group said they were “not prepared to discuss details at this time.”

The situation highlights a growing trend in cybercrime. Instead of only deploying ransomware to lock systems, attackers are increasingly using extortion emails. In this method, they claim to have stolen sensitive information and pressure companies or executives to pay large sums to prevent a leak. Even if the data theft is not real, the fear of reputational or financial damage can push victims to comply.

See Also: NCERT Issues Red Alert on Critical SAP NetWeaver Flaws

Cybersecurity experts recommend that companies treat such threats carefully. They advise not to pay ransoms, as it only encourages further attacks. Instead, organisations should strengthen their security, verify claims through technical investigation, and report incidents to relevant authorities.

This latest campaign also underscores the importance of protecting enterprise applications like Oracle E-Business Suite. These platforms often contain financial records, customer data, and operational details, making them valuable targets for cybercriminals.

For now, Google has urged caution but said it is continuing to monitor the situation. The company is also working with partners in the security industry to investigate the campaign further.

With extortion threats on the rise, experts believe more such cases may surface in the coming months. Businesses are being reminded once again that strong cybersecurity defences and quick response plans are essential in today’s digital world.