Particle.news
Download on the App Store
3 ARTICLES
·
last wk.

Envoy Air Confirms Oracle E‑Business Suite Breach in CL0P Extortion Campaign

The carrier reports no customer data exposure or operational impact, highlighting a wider exploit spree that triggered Oracle emergency patches.

Figurines with computers and smartphones are seen in front of the words "Cyber Attack" in this illustration taken, February 19, 2024. REUTERS/Dado Ruvic/Illustration
Image
Image

Overview

  • Envoy Air said its Oracle E‑Business Suite application was compromised in recent days, with law enforcement notified and an investigation underway.
  • According to the airline, no sensitive or customer data was affected, though limited business information and commercial contact details may have been exposed.
  • The company said the incident did not touch any American Airlines IT environments and did not affect flights or airport ground operations.
  • CL0P added American Airlines to its leak site and is publishing data it claims was taken from Envoy as part of the ongoing extortion campaign.
  • Oracle issued emergency fixes for E‑Business Suite flaws CVE‑2025‑61882 and CVE‑2025‑61884 as researchers reported months of activity and likely dozens of affected organizations.