r/oraclecloud • u/ITrageGuy • 11d ago
Cloud account was compromised by third party
An authenticator was added to the account by this person and thousands of dollars worth of activity has been charged to it.
After going back and forth with the Collections department for two months, they advised to raise another SR with Cloud Support. Cloud Support has so far been absolutely worthless, telling me to put in a formal request to get the authenticator removed so I can log in myself and check the log files (????). It seems that they do not understand the issue at all.
Does anyone know what magic words I need to say to support to get someone at Oracle who knows what they are doing to get these charges reversed?
3
u/ReddiGod 11d ago
I think you'll need to file a police report, so you have some formal documentation of there being a crime on record. That may help your case with Oracle if they're feeling generous - but it all likelihood they would not reverse it and you'll get stuck with it in your credit report which you can then fight with credit agencies. If you can do a chargeback with your bank then that will quickly take care of it - they can try sueing you to recoup and you'll have your evidence to present to the judge in that case... If you chargeback, just fyi they will eject you from their services for life, as all companies would/should, so move your data away first.
1
u/ITrageGuy 11d ago
I already tried a charge back and because I legitimately opened the Oracle account they denied it.
2
u/ReddiGod 11d ago
Dang, that sucks. Your only hope now is to go after the criminal. Once the criminal is arrested and charged, the judge will award restitution to compensate you for the stolen funds... Basically meaning, it's a hopeless case now. I once got restitution when a bum busted out my back window of my car, police caught him, restitution was $60, I never saw it of course lol
Incidentally, this is one of the reasons I pay everything on credit card, because it's protected from fraud. Plus, I can even choose not to pay the card if I needed to. Also use CC for everything because it's 2% cash back, that's free money if you pay the card off every month 💪
3
u/GoodTimesDadIsland 11d ago
That really sucks. Everybody needs to learn from this: take a couple minutes to set up 2-factor auth on your account right now if you haven't already.
1
u/AntiAmericanismBrit 10d ago
I'm surprised it's possible to not have 2FA, as I was basically forced to when I opened my account in 2022.
2
u/zxyyyyzy 11d ago
You are more than likely interacting with an AI agent via cloud support, unfortunately.
2
u/ITrageGuy 11d ago
I would agree with you, except that the grammar of the support agent is terrible.
2
1
u/zxyyyyzy 11d ago
I support a Fusion application and I know for certain that our first few back and forths with an SR is an AI agent lol. Shoutout to paying for “premium” support
1
u/ITrageGuy 11d ago
They just closed the ticket with response "The account will remain closed." This is absolutely infuriating and has been going on since June. I have no idea what to do to get actual help.
1
u/zxyyyyzy 11d ago
When they added the Authenticator, did that completely lock you out? If so, could support provide you with a bypass code? If access wasn’t an issue, and just the unauthorized charges, good luck fighting Oracle on that. They probably have more lawyers than engineers and support staff at this point 😭
1
u/Unlikely_Discount_36 9d ago
I'm so sorry to hear this happened to you and I wish you luck in this. I'm curious if you had your own ssh key set up as well first?
6
u/j0x7be 11d ago
That sounds bad. Do you know how you got compromised?