HackingTechnologyInformationVulnerability ExploitZero-DaySupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)LowContained

COX ENTERPRISES, INC.

bd_d243eedeb344b5f2 · schema v1 · pii pii-v1

Severity

Low

Discovered

Sep 29, 2025

Filed

Nov 20, 2025

To disclose

7 weeks

Affected

Not disclosed

Linked

10 filings

Confidence

66%

Full breach record for COX ENTERPRISES, INC. →

Cox Enterprises, Inc. disclosed a cybersecurity incident where cybercriminals exploited a previously unknown 'zero-day' vulnerability in Oracle's E-Business Suite between August 9-14, 2025. Cox became aware of suspicious activity on September 29, 2025. The incident potentially affected personal information including names. Cox applied the security fix, engaged cybersecurity experts, contacted law enforcement, and is offering credit monitoring services.

J jump to incidentP pin to compareR raw source

California clockDiscovered Sep 29, 2025 → Notified Nov 20, 202552d ✓ CA 60-day OK7 weeks discovery → filing

Incident timeline

undetected · 51 days

discovery → filing · 7 weeks / 52 days

Aug 9, 2025

Begins

Sep 29, 2025

Discovered

Nov 20, 2025

Filed

vs. sector median

11 wks faster

This filing is one of 10 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitecl0pbd_839c9a8c3542409b2025-10-27 · +24dVerified by operator

Regulatory filings (8) · sorted by filing gap

Nebraska State AGbd_40c9054d459138182025-11-20Verified by operator
Vermont State AGbd_76c8778cb9fa2c6d2025-11-20Verified
Massachusetts State AGbd_969a08a7f00f6f732025-11-20Verified by operator
Indiana State AGbd_a35479fbdcf86c9a2025-11-20Verified

Show 4 more filings ↓up to 5d gap

Maine State AGbd_c14447cb7482b2fd2025-11-20Verified
Texas State AGbd_244cea98a033cd5c2025-11-21 · +1dVerified
New Hampshire State AGbd_8766c6dda720b44a2025-11-21 · +1dVerified
Montana State AGbd_7369119a392f44282025-11-25 · +5dVerified

Name: COX ENTERPRISES, INC.
norm: cox enterprises
Domain: coxenterprises.com

Name: COX ENTERPRISES, INC.
norm: cox enterprises
Domain: coxenterprises.com
Industry: Technologyllm

Discovered: Sep 29, 2025
Breach occurred: Aug 9, 2025 – Aug 14, 2025
Undetected for: 51 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 20, 2025
Affected individuals: Not disclosed
Data types: Identity (basic)
Attack vector: Unknown
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Third party: via Oracle
Initial access: exploit_public_facing

During the incident: Launched an investigation
Applied Oracle’s security fix as soon as it became available
Brought in cybersecurity experts and data analysts to review our systems and the data that we thought may have been copied and taken
Been in contact with law enforcement
Offering 12/24 months of free credit monitoring and identity theft protection services through IDX
Changes made: Applied Oracle’s security fix
Constantly evaluating and monitoring our security practices and those of the third-party vendors we work with
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(52 days from discovery to filing)
Compliance flags: CA 60-day OK · 52d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Sep 29, 2025
→ Notified: Nov 20, 2025
52d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Sep 29, 2025 → Notified: Nov 20, 2025	52d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 9 states

View merged incident ↗

Nebraska State AGNov 20 · first

Vermont State AGNov 20 · first

Massachusetts State AGNov 20 · first

Indiana State AGNov 20 · first

Maine State AGNov 20 · first

California State AGNov 20 · first · this page

Texas State AG+1d

New Hampshire State AG+1d

Montana State AG+5d

Pattern: first filing Nov 20 (NE), last Nov 25 (MT) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-614528
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 20, 2025
Raw hash: dbfeb5051091f8f9d53da898dcdf0da2e84548fe01cea0b3b6a77409b3b5bcfb

Linked disclosures

Ransomware claims (1)

Regulatory filings (8) · sorted by filing gap

Reporting entityCOX ENTERPRISES, INC.

Victim entityCOX ENTERPRISES, INC.

Incidentdiscovered Sep 29, 2025

Stated responseLaunched an investigation

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov