The Washington Post Data Breach – Investigated by Federman & Sherwood
Oklahoma City, Oklahoma (November 13, 2025) – The law firm of Federman & Sherwood announces it is investigating a data breach involving The Washington Post, following the organization’s filing of a data breach notification with the Attorney General of Maine.
According to the notification, The Washington Post was contacted by an unauthorized actor on September 29, 2025, who claimed to have accessed the Post’s Oracle E-Business Suite applications. The organization immediately launched an internal investigation with support from external forensic experts. During the investigation, Oracle disclosed a previously unknown vulnerability affecting Oracle E-Business Suite systems broadly, and the Post confirmed that this vulnerability had been exploited within its own environment. Further review identified unauthorized access and acquisition of data between July 10, 2025, and August 22, 2025.
On October 27, 2025, The Washington Post completed its review of the compromised data and confirmed that the incident involved personal information belonging to certain current and former employees and contractors. The information potentially impacted includes names, bank account and routing numbers, Social Security numbers, and tax identification numbers, depending on the individual.
The Washington Post reports that it has applied Oracle’s security patches, enhanced its cybersecurity monitoring capabilities, and taken steps to better protect its Oracle environment moving forward. Written notifications have been mailed to individuals whose information was impacted offering complimentary identity protection services through IDX, including credit monitoring, identity theft insurance, and fraud resolution support.
Federman & Sherwood is investigating whether The Washington Post implemented and maintained adequate security protocols to safeguard sensitive data and whether affected individuals may be entitled to compensation, extended identity monitoring, or other legal remedies.
The compromised information may have included:
- Full name
- Social Security number
- Bank account number
- Bank routing number
- Tax identification number
- Other sensitive information
What is The Washington Post?
The Washington Post is an American daily newspaper that publishes news, analysis, and opinion on local, national, and global topics, with a particular focus on national politics.
If you were impacted by this breach, you may contact Federman & Sherwood at 1-800-237-1277 or click the link to complete the Data Breach Questionnaire and someone will reach out to you shortly.