Michelin, the global tire manufacturer, has confirmed that it was affected by a data breach stemming from the widespread cyberattack on organizations using Oracle E-Business Suite (EBS). The attack, attributed publicly to the Cl0p ransomware and extortion group, exploited zero-day vulnerabilities to gain unauthorized access to sensitive enterprise data stored in Oracle’s EBS platform.
The Cl0p campaign has targeted more than 100 organizations globally, according to reports posted on the group’s website. Security researchers, however, note that while Cl0p serves as the public-facing extortion brand, the operation is believed to be orchestrated by a highly sophisticated cluster of threat actors, most prominently known as FIN11. The group is known for carrying out financially motivated cyberattacks targeting large enterprises across multiple sectors.
Michelin confirmed the breach to SecurityWeek, indicating that it is actively working with cybersecurity experts to evaluate the scope and impact of the incident. The company has not disclosed the exact nature of the compromised data but emphasized that it is taking measures to safeguard sensitive information and reinforce its security infrastructure.
The attack on Oracle EBS users has raised concerns about the security of widely deployed enterprise management systems. EBS software, which is used by companies for financials, supply chain management, and human resources, contains vast amounts of critical operational and employee data, making it a lucrative target for cybercriminals.
Cl0p has previously been linked to ransomware and extortion campaigns in which stolen data is encrypted or threatened to be leaked unless ransom payments are made. The use of zero-day vulnerabilities in this campaign allowed the attackers to bypass existing security measures, demonstrating a high level of technical sophistication.
Security analysts warn that organizations using Oracle EBS should urgently review their systems, apply any available patches, and implement enhanced monitoring to detect potential breaches. Companies are also advised to ensure secure backup practices and develop contingency plans for ransomware-related incidents.
The confirmation by Michelin underscores the widespread nature of the attack and highlights the challenges global enterprises face in defending against sophisticated cyber threats. Experts believe that as more organizations adopt digital platforms for critical operations, the frequency and scale of attacks on enterprise software will continue to increase.
Regulators and cybersecurity authorities have urged companies to report breaches promptly and cooperate with investigations to mitigate risks. Organizations targeted by Cl0p, including Michelin, are being closely monitored by cybersecurity firms to prevent further exploitation or data leaks.
The incident serves as a reminder of the growing importance of enterprise cybersecurity, particularly for critical infrastructure and multinational corporations that rely heavily on centralized software systems for daily operations.
