JAKARTA - Alphabet's parent company from Google, said hackers were sending extortion emails to an unnamed executive. They claim to have stolen sensitive data from their Oracle business app.

In a statement, Google stated that a group of people claiming to be affiliated with the cl0p ransomware gang, were sending emails to "executives in various organizations claiming to have stolen sensitive data from their Oracle E-Business Suite."

Google warns that at the moment "we don't have enough evidence to definitively assess the truth of these claims."

Messages seeking comment from cl0p and Oracle have not received an immediate response. Google described this email campaign as "high volume" but declined to share further details.

According to additional reports from sources such as BleepingComputer and Bloomberg, the campaign began no later than September 29, 2025, and hackers claim to have broken into the Oracle E-Business Suite portal facing the internet by abusing the default password reset function.

In one case, they demanded a ransom of up to 50 million US dollars (IDR 831.5 billion), and provided evidence such as screenshots to the victim.

Cl0p is known as one of the world's largest phishing and malspam distributors, with more than 3,000 organizations in the US and 8,000 globally affected since 2023. However, Google through Mandiant stated that although its tactics were similar to previous Cl0p campaigns, data theft evidence remains unconfirmed.


The English, Chinese, Japanese, Arabic, and French versions are automatically generated by the AI. So there may still be inaccuracies in translating, please always see Indonesian as our main language. (system supported by DigitalSiber.id)