Auto Parts Giant LKQ Confirms Oracle EBS Breach

LKQ Corporation has confirmed it was among the victims of the Oracle E-Business Suite (EBS) campaign, with personal information of more than 9,000 individuals compromised in the attack. The company told the Maine Attorney General’s Office that the incident affected sole proprietor suppliers and involved data such as Employer Identification Number and SSN.

LKQ launched an investigation on 3 October and completed its analysis on 1 December, stating there is no evidence of impact to LKQ’s systems beyond the Oracle E-Business Suite environment. SecurityWeek notes that several terabytes of files were allegedly stolen and made available by the cybercriminals, who list over 100 alleged victims on the Cl0p ransomware site.

The piece, written by Eduard Kovacs and published on 17 December 2025, also highlights that LKQ had been named on the Cl0p leak site in late October and that the broader campaign has affected major organisations such as Logitech, Canon and Mazda. According to SecurityWeek, the attacker group’s campaign continues to name victims, though the extent of data leakage varies by organisation.