Cox Enterprises, a U.S.-based conglomerate with operations in telecommunications, media, and automotive services (e.g., Cox Communications, Autotrader), suffered a sophisticated data breach via a zero-day exploit (CVE-2025-61882) in Oracle’s E-Business Suite. Hackers, linked to the Cl0p ransomware group, infiltrated the network between August 9–14, 2025, exfiltrating 1.6TB of data—including sensitive personal information of 9,479 individuals (names, addresses, dates of birth, Social Security numbers, and internal documents). The breach was detected in late September 2025, with Cl0p leaking the data on the dark web. The attack exploited an unpatched critical vulnerability (CVSS 9.8) allowing unauthorized database access, heightening risks of identity theft, financial fraud, and reputational damage. Oracle released an emergency patch post-breach, but the delay enabled widespread exploitation across other high-profile targets (e.g., The Washington Post, Harvard University). Cox offered affected parties credit monitoring, though long-term risks persist. The incident underscores vulnerabilities in ERP systems, supply chain security gaps, and the escalating threat of ransomware-as-a-service (RaaS) campaigns targeting enterprise software.