[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f3ttq3prgz9rh0":3,"$f16val041noe8x":62},{"success":4,"breach":5},true,{"_id":6,"name":7,"title":8,"slug":9,"domain":10,"breachDate":11,"addedDate":12,"publishedAt":13,"modifiedDate":13,"contentUpdatedAt":13,"source":14,"sourceUrl":15,"sourceUrls":16,"pwnCount":19,"affectedCount":20,"affectedCountStatus":21,"affectedCountLowerBound":20,"affectedCountUnit":22,"hasEnglishDescription":4,"contentLocale":23,"availableLocales":24,"translations":34,"severity":45,"dataClasses":46,"description":52,"seoTitle":53,"seoDescription":54,"logoUrl":55,"isVerified":4,"isSensitive":4,"isSpamList":56,"isMalware":56,"company":57},"6a6ac23571189d1b2b04e3b4","WashingtonPostOracleEBS2025","Washington Post 数据泄露事件（至少862人受影响）","washington-post-oracle-ebs-2025","washingtonpost.com","2025-07-10T00:00:00.000Z","2026-07-30T03:17:09.862Z","2026-10-10T02:37:57.480Z","California and Texas Attorney General records","https:\u002F\u002Foag.ca.gov\u002Fecrime\u002Fdatabreach\u002Freports\u002Fsb24-626404",[15,17,18],"https:\u002F\u002Foag.ca.gov\u002Fsystem\u002Ffiles\u002FWaPo%20Sample%20Notice.pdf","https:\u002F\u002Foag.my.site.com\u002Fdatasecuritybreachreport\u002Fapex\u002FDataSecurityReportsPage",null,862,"lower_bound","people","zh",[25,26,23,27,28,29,30,31,32,33],"en","tr","hi","es","ar","fr","bn","pt","ru",{"en":35,"tr":36,"zh":37,"hi":38,"es":39,"ar":40,"fr":41,"bn":42,"pt":43,"ru":44},{"slug":9},{"slug":9},{"slug":9},{"slug":9},{"slug":9},{"slug":9},{"slug":9},{"slug":9},{"slug":9},{"slug":9},"Low",[47,48,49,50,51],"Names","Social security numbers","Government IDs","Financial account information","Health insurance information","\u003Cp>\u003Cstrong>2025年 Washington Post 数据泄露事件\u003C\u002Fstrong>源于该机构使用的 Oracle E-Business Suite 软件中一处此前未知的漏洞被利用。德克萨斯州监管机构的一份记录证实，至少有862人受到影响；全美受影响总人数尚未公布。\u003C\u002Fp>\n\u003Cp>The Washington Post 是一家出版纸质报刊和数字内容的美国新闻机构。此次事件涉及其内部 Oracle 业务应用中存储的数据，而非该报新闻网站上的账户。\u003C\u002Fp>\n\u003Ch2>事件是如何发生的？\u003C\u002Fh2>\n\u003Cp>2025年10月，一名威胁行为者联系 The Washington Post，声称已获取其 Oracle 应用的访问权限。该机构随后启动了数字取证调查。调查确认，数据在2025年7月10日至8月22日期间遭到未经授权的访问和获取。同一漏洞也影响了许多 Oracle 客户，并非仅涉及 The Post。详细的数据审查于2026年6月10日完成。\u003C\u002Fp>\n\u003Ch2>哪些信息受到影响？\u003C\u002Fh2>\n\u003Cp>根据德克萨斯州的记录，涉及的信息因人而异，可能包括姓名、社会保障号码、护照或州身份证等政府签发的身份证件信息、财务信息以及医疗保险信息。公开的通知样本未说明每位收件人具体涉及哪些信息字段，因此并非每个人都一定涉及所有信息类别。\u003C\u002Fp>\n\u003Ch2>The Washington Post 如何应对？\u003C\u002Fh2>\n\u003Cp>该机构与外部数字取证专家合作开展调查，对其 Oracle 环境采取安全防护措施，并在补丁发布后及时安装。该机构先通知了初步审查中确认受影响的人员，随后又联系了深入分析中发现的其他受影响人员。收到通知的人员可获得12个月或24个月的身份保护服务。\u003C\u002Fp>\n\u003Ch2>受影响人员应如何应对？\u003C\u002Fh2>\n\u003Cp>通知收件人应检查金融账户、信用报告和医疗保险对账单，留意不明活动。社会保障号码或政府签发的身份证件信息受到影响的人员，可以考虑设置信用冻结或欺诈警示。对于提及此次事件的消息，应通过已知的 Washington Post 官方渠道核实，而不要使用意外收到的电子邮件中的链接。\u003C\u002Fp>","Washington Post 数据泄露事件（至少862人受影响） (至少862 受影响人数)","Washington Post 数据泄露事件（至少862人受影响）. 据报告，涉及至少862人。 已报告的数据：姓名, 社会保障号码, 政府颁发的身份证件。 了解影响范围、风险及防护措施。","\u002Fuploads\u002Flogo\u002Fwashington-post.png",false,{"name":58,"sector":59,"country":60,"website":10,"websiteArchiveUrl":61,"websiteStatus":61,"websiteCheckedAt":19},"The Washington Post","Media","United States","",{"success":4,"breaches":63},[64,71,79,86],{"slug":65,"title":66,"companyName":67,"logoUrl":68,"breachDate":69,"affectedCount":70,"affectedCountStatus":21},"gannett-2026","Gannett 数据泄露事件（至少1人受影响）","USA TODAY Co.","\u002Fuploads\u002Flogo\u002Fusa-today-co.png","2026-07-22T00:00:00.000Z",1,{"slug":72,"title":73,"companyName":74,"logoUrl":75,"breachDate":76,"affectedCount":77,"affectedCountStatus":78},"success","SUCCESS 2026年数据泄露","SUCCESS","\u002Fuploads\u002Flogo\u002Fsuccess_com.webp","2026-03-04T00:00:00.000Z",253510,"known",{"slug":80,"title":81,"companyName":82,"logoUrl":83,"breachDate":84,"affectedCount":85,"affectedCountStatus":78},"questo-morris-communications-2025","Questo 与 Morris Communications 2025年数据泄露事件","Questo Inc. \u002F Morris Communications Company","\u002Fuploads\u002Flogo\u002Fmorris_com.png","2025-10-01T00:00:00.000Z",11950,{"slug":87,"title":88,"companyName":89,"logoUrl":90,"breachDate":91,"affectedCount":92,"affectedCountStatus":78},"lepoint-2024","Le Point 数据泄露","Le Point","\u002Fuploads\u002Flogo\u002Flepoint.webp","2024-11-10T00:00:00.000Z",479166]