Oracle, one of the world's largest technology companies, is facing intense criticism over its handling of two separate data breaches that have put sensitive information at risk. The incidents, which appear to be unrelated, have sparked concerns about the company's transparency and ability to protect its customers' data.

The first breach involves Oracle Health, a subsidiary that provides technology to hospitals and healthcare providers to access health records online. According to reports, hackers accessed Oracle servers and stole patient data, although the exact nature and scope of the breach remain unclear. Oracle notified some of its healthcare customers in March, but the company has been accused of lacking transparency and failing to provide adequate information about the incident.

An Oracle employee, who spoke to TechCrunch on condition of anonymity, expressed frustration with the company's handling of the breach. The employee claimed that Oracle had not been transparent even with its own staff, forcing them to rely on internal Slack channels and Reddit to learn about the incident. The employee also expressed concern that the breach could have far-reaching consequences, potentially affecting not just patient data but also other applications hosted by Oracle Health customers.

The second breach involves Oracle Cloud servers, with a hacker claiming to have stolen data from six million customers, including authentication data and encrypted passwords. Despite mounting evidence, Oracle has denied that a breach occurred, sparking criticism from cybersecurity experts. "Oracle need to clearly, openly and publicly communicate what happened, how it impacts customers, and what they're doing about it," wrote Kevin Beaumont in a blog post. "This is a matter of trust and responsibility."

The hacker, who goes by the online handle rose87168, posted on a cybercrime forum offering the stolen data for sale. To prove the breach, the hacker uploaded a text file containing their online handle to an Oracle Cloud server. Several Oracle customers have since confirmed that the data samples shared by the hacker appear genuine, further evidence of a breach.

Oracle's response to the breach has been widely criticized, with many accusing the company of downplaying the incident and failing to take responsibility. "If this ends up being true, and I struggle to see how it won't, this is a very very bad look," wrote cybersecurity expert Lisa Forte on Bluesky. The incident has raised concerns about Oracle's ability to protect its customers' data and has sparked calls for greater transparency and accountability.

The two breaches have significant implications for Oracle's customers, many of whom rely on the company's technology to manage sensitive information. The incidents have also raised broader questions about the security of cloud-based services and the need for greater transparency and accountability in the tech industry.

As the situation continues to unfold, Oracle faces intense scrutiny and pressure to provide clear and transparent information about the breaches. The company's response will have significant implications for its reputation and its relationships with customers, and will likely have far-reaching consequences for the tech industry as a whole.