Tire manufacturer Michelin has confirmed it was hit by a data breach following a massive cybercrime campaign targeting Oracle’s E-Business Suite (EBS).

The Breakdown

• The Culprit: The Cl0p ransomware group claimed the attack, though researchers link the operation to the sophisticated threat group FIN11.
• The Loot: Cybercriminals reportedly leaked over 300GB of files allegedly stolen from Michelin’s systems.
• The Weak Point: Attackers exploited a zero-day vulnerability (specifically CVE-2025-61882) to gain remote access to internet-facing Oracle EBS portals.
• The Timeline: While confirmed today, the broader campaign was most active between August and October 2025.

The Bigger Picture

Michelin is just one of over 100 organizations caught in this net. Other major victims confirming breaches include The Washington Post, Cox Enterprises, and Envoy Air.