Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Compliance

Oracle Fined $2 Million for Off-books Payments in India

WASHINGTON – (AFP) – Software and systems giant Oracle was fined $2 million Thursday to resolve charges that its India subsidiary kept a multi-million dollar off-books slush fund.

WASHINGTON – (AFP) – Software and systems giant Oracle was fined $2 million Thursday to resolve charges that its India subsidiary kept a multi-million dollar off-books slush fund.

The Securities and Exchange Commission said it had filed charges in San Francisco District Court accusing Oracle of violating the US Foreign Corrupt Practices Act by not preventing the subsidiary from setting up the $2.2 million fund.

Oracle Fined $2 MillionThe money, which came out of the receipts from sales to Indian government agencies over 2005-2007, “was eventually used to make unauthorized payments to phony vendors in India”, the SEC said in a statement.

The SEC did not allege that bribery had taken place, but suggested it was the possible purpose for payments to these ostensible vendors.

“In fact, none of these storefront-only third parties provided any services or were included on Oracle’s approved vendor list,” it said.

“The third-party payments created the risk that the funds could be used for illicit purposes such as bribery or embezzlement.”

Oracle neither admitted nor denied the allegations, but the SEC said it voluntarily disclosed the problem, had cooperated with the investigation and had fired employees involved in the misconduct.

But the company was fined for poor internal controls and poor supervision of its India subsidiary.

“Through its subsidiary’s use of secret cash cushions, Oracle exposed itself to the risk that these hidden funds would be put to illegal use,” said SEC San Francisco official Marc Fagel.

Advertisement. Scroll to continue reading.

“It is important for US companies to proactively establish policies and procedures to minimize the potential for payments to foreign officials or other unauthorized uses of company funds.”

Written By

AFP 2023

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Register

People on the Move

Shay Mowlem has been named CMO of runtime and application security company Contrast Security.

Attack detection firm Vectra AI has appointed Jeff Reed to the newly created role of Chief Product Officer.

Shaun Khalfan has joined payments giant PayPal as SVP, CISO.

More People On The Move

Expert Insights

Related Content

Application Security

Cycode, a startup that provides solutions for protecting software source code, emerged from stealth mode on Tuesday with $4.6 million in seed funding.

CISO Strategy

SecurityWeek spoke with more than 300 cybersecurity experts to see what is bubbling beneath the surface, and examine how those evolving threats will present...

CISO Conversations

Joanna Burkey, CISO at HP, and Kevin Cross, CISO at Dell, discuss how the role of a CISO is different for a multinational corporation...

CISO Conversations

In this issue of CISO Conversations we talk to two CISOs about solving the CISO/CIO conflict by combining the roles under one person.

CISO Strategy

Security professionals understand the need for resilience in their company’s security posture, but often fail to build their own psychological resilience to stress.

Management & Strategy

SecurityWeek examines how a layoff-induced influx of experienced professionals into the job seeker market is affecting or might affect, the skills gap and recruitment...

Cybersecurity Funding

2022 Cybersecurity Year in Review: Top news headlines and trends that impacted the security ecosystem