Barts Health NHS discloses data breach after Oracle zero-day hack
Recorded: Dec. 5, 2025, 9:13 p.m.
| Original | Summarized |
Barts Health NHS discloses data breach after Oracle zero-day hack News Featured Critical React, Next.js flaw lets hackers execute code on servers North Korea lures engineers to rent identities in fake IT worker scheme CISA warns of Chinese "BrickStorm" malware attacks on VMware servers Marquis data breach impacts over 74 US banks, credit unions Barts Health NHS discloses data breach after Oracle zero-day hack FBI warns of virtual kidnapping scams using altered social media photos A Practical Guide to Continuous Attack Surface Visibility EU fines X $140 million over deceptive blue checkmarks Tutorials Latest How to access the Dark Web using the Tor Browser How to enable Kernel-mode Hardware-enforced Stack Protection in Windows 11 How to use the Windows Registry Editor How to backup and restore the Windows Registry How to start Windows in Safe Mode How to remove a Trojan, Virus, Worm, or other Malware How to show hidden files in Windows 7 How to see hidden files in Windows Webinars Latest Qualys BrowserCheck STOPDecrypter AuroraDecrypter FilesLockerDecrypter AdwCleaner ComboFix RKill Junkware Removal Tool Deals Categories eLearning IT Certification Courses Gear + Gadgets Security VPNs Popular Best VPNs How to change IP address Access the dark web safely Best VPN for YouTube Forums Virus Removal Guides HomeNewsSecurityBarts Health NHS discloses data breach after Oracle zero-day hack Barts Health NHS discloses data breach after Oracle zero-day hack By Bill Toulas December 5, 2025 Barts Health NHS Trust, a major healthcare provider in England, announced that Clop ransomware actors have stolen files from one of its databases after exploiting a vulnerability in its Oracle E-business Suite software. Break down IAM silos like Bitpanda, KnowBe4, and PathAI Related Articles: Clop Bill Toulas Previous Article Post a Comment Community Rules You need to login in order to post a comment Not a member yet? Register Now You may also like: Popular Stories ChatGPT is down worldwide, conversations disappeared for users Cloudflare down, websites offline with 500 Internal Server Error Marquis data breach impacts over 74 US banks, credit unions Sponsor Posts Empowering IT teams with intelligence driven cyber threat research. Overdue a password health-check? Audit your Active Directory for free Hackers love the holidays! Share FREE Security Awareness Training to keep family & friends cyber-safe! AI is a data-breach time bomb: Read the new report What you’re overlooking to protect your business Upcoming Webinar Follow us: Main Sections News Community Forums Useful Resources Welcome Guide Company About BleepingComputer Terms of Use - Privacy Policy - Ethics Statement - Affiliate Disclosure Copyright @ 2003 - 2025 Bleeping Computer® LLC - All Rights Reserved Login Username Password Remember Me Sign in anonymously Sign in with Twitter Not a member yet? Register Now Help us understand the problem. What is going on with this comment? Spam Abusive or Harmful Inappropriate content Strong language Other Read our posting guidelinese to learn what content is prohibited. Submitting... |
Barts Health NHS Trust experienced a data breach following a zero-day exploit of a vulnerability in its Oracle E-Business Suite software, perpetrated by the Clop ransomware group. The breach, discovered in November 2025, involved the theft of invoices spanning several years, exposing the full names and addresses of individuals who had paid for treatment services at the trust’s five hospitals – Mile End, Newham, Royal London, St Bartholomew’s, and Whipps Cross – along with accounting services provided to Barking, Havering, and Redbridge University Hospitals NHS Trust since April 2024. The stolen data was subsequently leaked on the dark web by Clop. The attackers exploited CVE-2025-61882, a critical flaw in Oracle E-Business Suite, starting in early August 2025. Clop has been responsible for numerous data theft attacks globally, targeting organizations such as Envoy Air, Harvard University, GlobalLogic, The Washington Post, Logitech, Dartmouth College, the University of Pennsylvania, and the University of Phoenix. Notably, Barts Health confirmed that the breach did not compromise its electronic patient record or core clinical systems, demonstrating a key element of risk mitigation. The Information Commissioner’s Office (ICO), the National Cyber Security Centre (NCSC), and the Metropolitan Police have been informed of the incident. Barts Health is pursuing a High Court order to prevent the unauthorized publication, use, or sharing of the stolen data, though the efficacy of such orders is often limited. While initial reports indicated no publicly available information related to the breach, Clop subsequently published the data, creating a risk for individuals who had patronized the hospitals. Patients are advised to scrutinize their invoices and remain vigilant against unsolicited communications requesting payment or personal information. The incident highlights the ongoing risk posed by zero-day exploits and underscores the importance of proactive vulnerability management and robust cybersecurity practices, particularly within healthcare organizations that handle sensitive patient data. The extensive list of organizations impacted by Clop demonstrates the breadth of this threat actor’s capabilities and the potential consequences of unpatched systems. |