Washington Post data breach impacts nearly 10K employees, contractors

The Washington Post has notified nearly 10,000 employees and contractors that their personal and financial data was exposed in a data breach involving a zero-day vulnerability in Oracle E-Business Suite software, with the Clop ransomware group linked to the attack. The breach occurred between July 10 and August 22, and the hackers attempted to extort the Washington Post in late September. Compromised data includes full names, bank account numbers, Social Security numbers, and tax and ID numbers, with affected individuals offered 12 months of free identity protection services.