HackingTechnologyProfessional ServicesInformationVulnerability ExploitZero-DayData ExfiltratedTargetedIdentity (basic)MediumContained

COX ENTERPRISES, INC.

bd_c14447cb7482b2fd · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 29, 2025

Filed

Nov 20, 2025

To disclose

7 weeks

Affected · nationwide

9,4794 in this filing

Linked

10 records

Confidence

66%

Full breach record for COX ENTERPRISES, INC. →

Cox Enterprises, Inc. disclosed a cybersecurity incident involving Oracle’s E-Business Suite. Cybercriminals exploited a zero-day vulnerability between August 9-14, 2025. Cox became aware of suspicious activity on September 29, 2025, and confirmed data involvement on October 31, 2025. Approximately 9,479 individuals were affected, including 4 Maine residents. Personal information, including names, was accessed. Cox engaged law enforcement, applied security fixes, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Sep 29, 2025 → Filed with AG Nov 20, 202552d ⏱ ME AG >30d7 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 51 days

discovery → filing · 7 weeks / 52 days

Aug 9, 2025

Begins

Sep 29, 2025

Discovered

Nov 20, 2025

Filed

vs. sector median

3 wks faster

This filing is one of 10 records about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitecl0pbd_839c9a8c3542409b2025-10-27 · +24dVerified by operator

Regulatory filings (8) · sorted by filing gap

Nebraska State AGbd_40c9054d459138182025-11-20Verified by operator
Vermont State AGbd_76c8778cb9fa2c6d2025-11-20Verified
Massachusetts State AGbd_969a08a7f00f6f732025-11-20Verified by operator
Indiana State AGbd_a35479fbdcf86c9a2025-11-20Verified

Show 4 more filings ↓up to 5d gap

California State AGbd_d243eedeb344b5f22025-11-20Verified
Texas State AGbd_244cea98a033cd5c2025-11-21 · +1dVerified
New Hampshire State AGbd_8766c6dda720b44a2025-11-21 · +1dVerified
Montana State AGbd_7369119a392f44282025-11-25 · +5dVerified

Name: COX ENTERPRISES, INC.
norm: cox enterprises
Domain: coxenterprises.com

Name: COX ENTERPRISES, INC.
norm: cox enterprises
Domain: coxenterprises.com
Industry: TechnologyllmProfessional Servicesllm

Discovered: Sep 29, 2025
Breach occurred: Aug 9, 2025 – Aug 14, 2025
Undetected for: 51 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 20, 2025
Affected individuals: 9,479state + nationwide
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified Maine Attorney General
Initial access: exploit_public_facing

During the incident: Launched an investigation
Applied Oracle’s security fix as soon as it became available
Brought in cybersecurity experts and data analysts to review our systems
Been in contact with law enforcement
Changes made: Offering 12 months of free credit monitoring and identity theft protection services through IDX
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(52 days from discovery to filing)
Compliance flags: ME AG >30d · 52d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Sep 29, 2025
→ Filed with AG: Nov 20, 2025
52d 30 days (soft) ME AG >30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Sep 29, 2025 → Filed with AG: Nov 20, 2025	52d	30 days (soft)	ME AG >30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 9 states

View merged incident ↗

Nebraska State AGNov 20 · first

Vermont State AGNov 20 · first

Massachusetts State AGNov 20 · first

Indiana State AGNov 20 · first

California State AGNov 20 · first

Maine State AGNov 20 · first · this page

Texas State AG+1d

New Hampshire State AG+1d

Montana State AG+5d

Pattern: first filing Nov 20 (NE), last Nov 25 (MT) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/314b7585-15e4-4574-b102-6593275436d2.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 20, 2025
Raw hash: 8bf9ef59c41518acf4b4a5f8f7f17006ecb06f18b04ecb4ad97d79220d4df81a

Linked disclosures

Ransomware claims (1)

Regulatory filings (8) · sorted by filing gap

Reporting entityCOX ENTERPRISES, INC.

Victim entityCOX ENTERPRISES, INC.

Incidentdiscovered Sep 29, 2025

Stated responseLaunched an investigation

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov