Oracle has finally acknowledged to some customers that attackers have stolen old client credentials after breaching a “legacy environment” last used in 2017. […]
from https://www.bleepingcomputer.com/news/security/oracle-privately-confirms-cloud-breach-to-customers/