On March 21, 2025, cybersecurity firm CloudSEK’s XVigil uncovered a major supply chain breach involving Oracle Cloud. A threat actor known as "rose87168" is reportedly selling 6 million records stolen from Oracle’s SSO and LDAP systems. The leaked data includes: JKS files, encrypted SSO passwords, key files and enterprise Manager JPS keys.