Oracle E-Business Suite Data Security Incident & Support
We have been made aware of a data security incident affecting our Oracle E-Business Suite systems, which support our business operations. We understand that this incident originated from vulnerabilities in Oracle's E-Business Suite software which were exploited by the Cl0p cybercriminal group to take the information of companies around the world.
This was not a breach of Fleet Management's own IT security controls and other IT infrastructure is not affected. We understand that the vulnerabilities existed within Oracle's software code, and evidence indicates that data theft occurred before Oracle made available the necessary security patches.
According to cybersecurity experts and published reports, over 100 organisations worldwide have been impacted by the same Oracle EBS vulnerabilities, including organisations globally have been identified as victims, including universities, newspapers, hospital trusts, and companies across finance, manufacturing, and other sectors.
Protecting data privacy is our priority and we are investigating this matter with urgency. Based on our ongoing investigation with third-party cybersecurity experts, employee, seafarer and contractor information stored in our Oracle systems may have been accessed. We are still examining the data to determine exactly whose information was accessed and at this time, we are unable to confirm which specific individuals are affected. We will continue to provide updates as our investigation progresses and as we learn more about the specific data involved.
Please remain extra vigilant and take precautions.
A cybercriminal group known as Cl0p exploited previously unknown security vulnerabilities (known as "zero-day" vulnerabilities) in Oracle's E-Business Suite software. The hackers were able to access data from organisations around the world that use Oracle EBS, including Fleet Management Limited. This was not a result of any weakness in Fleet Management's own security practices – we understand that the vulnerabilities were in Oracle's software code. Fleet Management, like many other organisations globally, was a victim of this criminal activity.
Based on investigations by cybersecurity advisors globally, the Cl0p group began exploiting these vulnerabilities as early as August 2025, before Oracle was aware. Oracle released emergency security patches on 4 and 11 October 2025 which Fleet Management applied upon release. Our cybersecurity advisors informed us that Fleet Management's data had been published on the dark web site on 7 December 2025. On 9 December 2025, we confirmed that the published files contained legitimate data. Our investigation is progressing rapidly to assess the full extent of the data that has been compromised.
Personal information related to employees (including former employees), seafarers (both sailing and not sailing currently) and contractors is stored in our Oracle systems.
We are still working with cybersecurity experts to determine the exact scope. Based on what is stored in our Oracle systems, information such as names and company assigned ID, contact information and bank account details (including IBANs) may have been accessed. For certain individual contacts and seafarers, such data includes their country ID, passport, KYC documents, PAN card, date of birth.
• Be vigilant against phishing: Treat any unusual emails, phone calls, or text messages that claim to be from Fleet Management, your bank, or other organisations with caution. Avoid clicking on links or providing personal information in response to unsolicited communications or unusual requests. Be especially watchful for requests for passwords, PINs, or other authentication credentials.
• Monitor your bank accounts: You may wish to review your bank statements regularly for any unfamiliar transactions. If you notice anything suspicious, we suggest you report it to your bank. We recommend speaking with your bank for guidance specific to your situation.
• Consider fraud alerts: You may wish to contact your bank about placing fraud alerts on your accounts or enabling additional transaction notifications. Your bank can advise on what options are available to you.
• Review your passwords: As good practice, you may wish to consider updating passwords for important accounts, particularly if you use similar passwords across multiple services. Additionally, ensuring that devices used to receive one-time passcodes are kept up to date can help strengthen security.
• Verify requests for information: If you receive contact requesting personal or financial information purporting to be from Fleet Management, we suggest verifying it by contacting Fleet Management directly through known channels before responding.
• Working with cybersecurity experts: We have engaged cyber defence & resilience partners to conduct a thorough forensic investigation and help us determine the full scope of the data theft.
• Cooperating with authorities: We are in contact with relevant regulatory authorities in the jurisdictions where we operate, including data protection regulators, and are complying with all applicable disclosure requirements.
• Strengthening monitoring: We have deployed additional security monitoring tools across affected systems and are actively monitoring for any signs of misuse. We have also engaged an independent third-party to conduct comprehensive penetration testing, further validating the integrity of our IT systems.
• Assessing legal options: We are evaluating our legal options against the parties responsible for this criminal activity.
Based on our investigation to date, we have no evidence that other Fleet Management systems beyond Oracle EBS were affected. Additional monitoring has been enabled across our infrastructure, and we continue to work with cybersecurity partners to validate this assessment.
This webpage will be updated on a regular basis. We will continue to keep you informed as our investigation progresses.
We understand this news may be unsettling and we want to reassure you that we are working hard to investigate and protect your information.
We want to assure you that we are taking this matter extremely seriously and are doing everything within our power to address it. This webpage will be updated on a regular basis.
For enquiries, please use the enquiry form below, and complete the appropriate subject so that it is swiftly directed to the relevant team.
We appreciate your understanding and vigilance during this time.
• Salary payments are safe. Fleet Management's payroll systems are separate from Oracle EBS and continue to operate normally.
• No payment card data is stored on the affected system. There is no need to report or replace bank cards as a result of this incident.
• The vulnerabilities have been patched. Oracle released security patches in October 2025 which Fleet Management applied upon release. There is no ongoing active threat to our systems from these vulnerabilities.
• We are working with experts and authorities. Our investigation is progressing with the support of cybersecurity specialists and in coordination with relevant authorities.
Note: These are general precautions that you may find helpful. These are suggestions only and do not constitute legal, financial, or professional advice. We encourage you to use your own judgement and, where appropriate, seek guidance from your bank or other relevant professionals.
Disclaimer: This communication and the attached FAQs are provided for informational purposes only and do not constitute legal, financial, or professional advice. The steps and precautions suggested are general in nature. You should exercise your own judgement and, where appropriate, seek independent professional advice regarding your specific circumstances. Fleet Management Limited accepts no liability for any actions taken or not taken based on this communication.