Logitech Confirms Data Breach Following Designation as Oracle Hack Victim

Logitech disclosed a data breach on 17 November 2025, shortly after being named as a victim of the Oracle EBS hack campaign by Cl0p. The company said an ongoing investigation found data exfiltration from its internal IT system, with a zero-day vulnerability in a third-party software platform exploited to copy certain data.

It added that the information likely included limited details about employees, consumers, and some data relating to customers and suppliers, but that it does not believe any sensitive personal information such as national ID numbers or credit card data was housed there. Logitech noted that products, operations, or manufacturing were not affected, and it expected cybersecurity insurance to cover incident response, forensics, and related costs within policy limits.

SecurityWeek reports that the cybercriminals have leaked about 1.8 TB of archive files allegedly storing Logitech data, and more than 50 victims have been named on the Cl0p site, with the campaign publicly linked to FIN11 by the cybersecurity community.