On September 29, 2025, Cox Enterprises, Inc., (“Cox”) discovered suspicious activity involving Oracle’s E-Business Suite, a platform used for back-office operations. Cybercriminals exploited a previously unknown security flaw (a “zero-day” vulnerability) between August 9 and August 14, 2025. Once Cox identified the issue, they applied Oracle’s security fix, launched an investigation, and engaged cybersecurity experts and law enforcement.
Cox Enterprises is a privately held, family-owned American company based in Atlanta, Georgia, with primary holdings in communications and automotive services. It is a global company with $23 billion in annual revenues and approximately 50,000 employees. The company’s main subsidiaries are Cox Communications and Cox Automotive.
On October 31, 2025, Cox determined that some personal information may have been involved. Cox sent data breach notification letters to those affected. If you received a Data Breach notification letter from Cox, it confirms that your information was potentially impacted.
What information is involved in the Cox Enterprises, Inc. Data Breach?
Compromised information may include:
Name
Other Personal Identifiable Information (PII)
Cox has offered affected individuals complimentary credit monitoring and identity theft protection services through IDX. Enrollment details were provided in the notification letter.
Your Personally Identifiable Information (PII) includes details that can be used to identify you. Organizations are legally obligated to safeguard this data, and failure to do so can result in statutory fines and other legal consequences. If PII is stolen, it may be exploited by criminals to commit identity fraud.
If your data has been exposed in a breach, one of the most effective steps you can take is to enroll in credit and identity monitoring services promptly.
Residents of California benefit from additional privacy protections under the California Consumer Privacy Act (CCPA) and the Confidentiality of Medical Information Act (CMIA), which grant enhanced rights regarding personal and medical data.
If you received a NOTICE OF DATA BREACH letter from Cox Enterprises, your personal information may be at risk. This type of data can be exploited by identity thieves to commit fraud and other crimes.
Contact the Data Breach Attorneys at Emery | Reddy today for a Free Case Review.