Washington Post hack exposes personal data of John Bolton, almost 10,000 others

The Washington Post was hacked, with personal data exposed for John Bolton among nearly 10,000 others after access to its Oracle E-Business Suite systems. The post states hackers accessed the network between 10 July and 22 Aug, obtaining data on 9,720 employees and contractors, including full names, Social Security numbers, bank account and routing numbers, and tax and ID numbers. The Post says it learned of the breach after being contacted on 29 September by a “bad actor” claiming access to the E-Business Suite.

According to Oracle, a previously unknown security vulnerability in the E-Business Suite software was discovered, prompting the company to inform The Post. The disclosure notes that high‑profile individuals were among those affected, with analysis by Straight Arrow News supporting the finding. Read more at Straight Arrow News, and note that the incident highlights the sensitivity of payroll and financial data stored in core enterprise applications.