Google alerts firms about extortion emails targeting top executives related to ransomware threats.
Google has issued a warning to firms worldwide about a large-scale extortion campaign targeting top executives, claiming stolen data from Oracle’s widely used E-Business Suite. Starting late September 2025, hackers linked to the cl0p ransomware gang have sent highly personalised emails threatening to leak sensitive corporate information unless substantial ransoms—sometimes as high as $50 million—are paid in cryptocurrency. Oracle has confirmed that its customers have received such extortion emails and is working closely with Google’s Mandiant cybersecurity team to investigate. Although definitive proof of actual data theft is lacking, the psychological pressure and reputational risks posed by these threats are significant. Oracle advises CEOs and CIOs to alert security teams, review cloud configurations, and educate staff on phishing tactics targeting executives. The attack exploits vulnerabilities through compromised third-party accounts and potentially weak password-reset processes. From an Indian perspective, this highlights the critical need for enhanced cybersecurity vigilance, robust access controls, and prompt patch management, especially for enterprises relying on Oracle’s platforms. This incident underscores the evolving threat landscape where ransomware groups increasingly focus on extortion, impacting business security and national economic stability.