[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f1exbbc4jnlx3g":3},{"success":4,"breach":5},true,{"_id":6,"name":7,"title":8,"slug":9,"domain":10,"breachDate":11,"addedDate":12,"modifiedDate":12,"contentUpdatedAt":12,"source":13,"sourceUrl":14,"sourceUrls":15,"pwnCount":18,"affectedCount":19,"affectedCountStatus":20,"affectedCountLowerBound":19,"affectedCountUnit":21,"hasEnglishDescription":4,"severity":22,"dataClasses":23,"description":29,"seoTitle":30,"seoTitleEn":31,"seoDescription":30,"seoDescriptionEn":32,"logoUrl":33,"isVerified":4,"isSensitive":4,"isSpamList":34,"isMalware":34,"company":35},"6a6ac23571189d1b2b04e3b4","WashingtonPostOracleEBS2025","Washington Post 2025 Data Breach","washington-post-oracle-ebs-2025","washingtonpost.com","2025-07-10T00:00:00.000Z","2026-07-30T03:17:09.862Z","California and Texas Attorney General records","https:\u002F\u002Foag.ca.gov\u002Fecrime\u002Fdatabreach\u002Freports\u002Fsb24-626404",[14,16,17],"https:\u002F\u002Foag.ca.gov\u002Fsystem\u002Ffiles\u002FWaPo%20Sample%20Notice.pdf","https:\u002F\u002Foag.my.site.com\u002Fdatasecuritybreachreport\u002Fapex\u002FDataSecurityReportsPage",null,862,"lower_bound","people","Low",[24,25,26,27,28],"Names","Social security numbers","Government IDs","Financial account information","Health insurance information","\u003Cp>\u003Cstrong>The 2025 Washington Post data breach\u003C\u002Fstrong> resulted from exploitation of a previously unknown vulnerability in Oracle E-Business Suite software used by the organization. A Texas regulator record confirms that at least 862 people were affected; the nationwide total has not been disclosed.\u003C\u002Fp>\n\u003Cp>The Washington Post is a U.S. news organization operating print and digital publications. The incident involved data held in internal Oracle business applications, not accounts on the newspaper's news website.\u003C\u002Fp>\n\u003Ch2>How Did the Incident Occur?\u003C\u002Fh2>\n\u003Cp>The Washington Post began a forensic investigation after a threat actor contacted it in October 2025 and claimed access to its Oracle applications. The review confirmed that data was accessed and acquired without authorization between July 10 and August 22, 2025. The same vulnerability affected many Oracle customers and was not specific to The Post. A detailed data review was completed on June 10, 2026.\u003C\u002Fp>\n\u003Ch2>What Information Was Affected?\u003C\u002Fh2>\n\u003Cp>According to the Texas record, the information could have included names, Social Security numbers, government-issued identification such as passports or state IDs, financial information, and health-insurance information, depending on the person. The public sample notice does not show which fields applied to each recipient, so not every category necessarily applied to every person.\u003C\u002Fp>\n\u003Ch2>How Did The Washington Post Respond?\u003C\u002Fh2>\n\u003Cp>The organization investigated with external forensic specialists, secured its Oracle environment, and applied patches as they became available. It notified people identified in an initial review and then contacted additional people found during a deeper analysis. Notice recipients were offered either 12 or 24 months of identity-protection services.\u003C\u002Fp>\n\u003Ch2>What Should Affected People Do?\u003C\u002Fh2>\n\u003Cp>Notice recipients should review financial accounts, credit reports, and health-insurance statements for unfamiliar activity. People whose Social Security or government-ID information was involved may consider a credit freeze or fraud alert. Messages referring to the incident should be verified through known official Washington Post channels instead of links in unexpected emails.\u003C\u002Fp>","","Washington Post Data Breach (At Least 862 People Affected)","At least 862 people were affected in the Washington Post breach. Review the Oracle exploit timeline, exposed information, and response.","\u002Fuploads\u002Flogo\u002Fwashington-post.png",false,{"name":36,"sector":37,"country":38,"website":10,"websiteArchiveUrl":30,"websiteStatus":30,"websiteCheckedAt":18},"The Washington Post","Media","United States"]