Oracle has finally acknowledged to some customers that attackers have stolen old client credentials after breaching a "legacy environment" last used in 2017.

Despite Oracle denying a breach of its Oracle Cloud federated SSO login servers and the theft of account data for 6 million ...