Netherlands Privacy Class Action

On August 14, 2020, The Privacy Collective (TPC), a foundation having its registered office in Amsterdam, filed a purported class action lawsuit against Oracle Nederland B.V., Oracle Corporation and Oracle America, Inc. (the Oracle Defendants), Salesforce.com, Inc. and SFDC Netherlands B.V. in the District Court of Amsterdam. TPC alleges that the Oracle Defendants’ Data Management Platform product violates certain articles of the European Union Charter of Fundamental Rights, the General Data Protection Regulation (GDPR) and the Dutch Telecommunications Act (Telecommunicatiewet). TPC claims damages under a number of categories, including: “immaterial damages” (at a fixed amount of €500 per Dutch internet user); “material damages” (in that the costs of loss of control over personal data should be equated to the market value of the personal data for parties like the Oracle Defendants); compensation for losses suffered due to an alleged data breach (at a fixed amount of €100 per Dutch internet user);

and compensation for the costs of the litigation funder (10% to 25% of the compensation awarded); and the (actual) cost of the proceedings and extrajudicial costs.

We filed our defense on March 3, 2021, and on December 29, 2021, the District Court issued a judgment, holding that all of TPC’s claims were deemed inadmissible because of fundamental procedural flaws. TPC filed an appeal with the Court of Appeal in Amsterdam challenging the District Court’s judgment, except for the claims regarding the alleged data breach, which were dropped. On June 18, 2024, the Court of Appeal overturned the District Court’s decision regarding admissibility, thus permitting the case to proceed. The Court of Appeal granted Oracle’s request for an interim appeal to the Supreme Court, and on July 17, 2026, the Supreme Court found that the Court of Appeal had applied the wrong standard for evaluating a class action and remanded the case to the Court of Appeal for further proceedings. On July 27, 2026, Oracle filed and served a Writ of Summons to the Court of Appeal with the first court date being on August 4, 2026 and a submission following referral by the Supreme Court due on September 15, 2026.

On September 24, 2025, TPC filed a motion in the District Court to lift the suspension of proceedings. On September 25, 2025, Oracle opposed that motion. The court has not yet ruled on that motion.

We believe that we have meritorious defenses against this action, including defenses to the quantum of damages claimed, and we will continue to vigorously defend it.

While the final outcome of this matter cannot be predicted with certainty, we do not believe that it will have a material impact on our financial position or results of operations.

Securities Class Action Regarding Oracle Cloud Infrastructure

On February 3, 2026, a putative class action, brought by an alleged stockholder of Oracle, was filed in the U.S. District Court for the District of Delaware, and on July 14, 2026, the plaintiff filed an amended class action complaint against us, our Chief Technology Officer, one of our Chief Executive Officers, two other Oracle executives, and one member of the Board. The plaintiff seeks to represent a class of Oracle stockholders, alleging that the defendants made or are responsible for false and misleading statements regarding Oracle’s cloud infrastructure business. The plaintiff seeks a ruling that this case may proceed as a class action and seeks damages, equitable relief, and attorneys’ fees and costs. The defendants must respond to the amended complaint by September 16, 2026. If the defendants move to dismiss the amended complaint, that motion will be fully briefed by December 18, 2026.

We believe that we have meritorious defenses against this action, and we will continue to vigorously defend it.

While the final outcome of this matter cannot be predicted with certainty, we do not believe that it will have a material impact on our financial position or results of operations.

Other Litigation

We are party to various other legal proceedings and claims, either asserted or unasserted, which arise in the ordinary course of business, including proceedings and claims that relate to acquisitions we have completed or to companies we have acquired or are attempting to acquire. While the outcome of these matters cannot be predicted with certainty, we do not believe that the outcome of any of these matters, individually or in the aggregate, will result in losses that are materially in excess of amounts already recognized, if any.