University of Phoenix discloses data breach after Oracle hack

The University of Phoenix recently admitted to a data breach stemming from a Clop ransomware gang’s exploitation of a zero-day vulnerability in Oracle’s E-Business Suite back in August 2025, joining a string of high-profile victims like Harvard and the University of Pennsylvania. Hackers swiped sensitive details—including names, DOBs, Social Security numbers, and bank info—from students, staff, and suppliers, highlighting the risks of outdated enterprise software. While UoPX is still assessing the damage and notifying affected parties, this incident underscores Clop’s ongoing spree of attacks on Oracle systems across various organizations worldwide. For SMBs and MSPs, this serves as a wake-up call to patch vulnerabilities pronto and bolster identity access management, because waiting for a breach to spill the beans on your security flaws is a gamble no business can afford.

Source: https://www.bleepingcomputer.com/news/security/university-of-phoenix-discloses-data-breach-after-oracle-hack/