Oracle Health breach exposed data of nearly 20 million patients, Texas AG says
A 2025 cyberattack on Oracle Health compromised personal and medical records for almost 20 million people, including 3 million Texans, according to a Texas attorney general report cited by Bloomberg. The attacker allegedly used stolen credentials to access old Cerner servers before their data was migrated to Oracle's cloud, copying Social Security numbers, addresses and medical information. Oracle began notifying affected customers in March 2025, but neither Oracle nor the AG's office has named which hospitals or clinics were impacted.
GoKawiil's interpretation of the reporting above, not reported fact.
The scale of the breach highlights risks tied to Oracle's $28.3 billion Cerner acquisition, particularly legacy infrastructure that had not yet been secured under Oracle's cloud systems. Because federal agencies like the Department of Defense and Veterans Affairs use Oracle Health, the exposure could raise national security and privacy concerns beyond civilian hospitals. The lack of disclosure about specific affected providers may complicate patients' ability to assess their own risk.
- Nearly 20 million people had data exposed, including 3 million Texans.
- Stolen data reportedly included Social Security numbers, diagnoses, and medical records from legacy Cerner servers.
- Affected organizations like Christus Health are offering credit monitoring, but full list of impacted providers remains undisclosed.
Aura Identity Theft Protection — With nearly 20 million people's Social Security numbers and medical records exposed in this breach, monitoring your identity and credit has never been more important. Aura offers continuous monitoring and alerts that can help you catch fraud early if your data was part of this leak.
See Aura Identity Theft Protection on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: cnet.com — Alex Valdes, 2026-10-06
Published there as: “Oracle Health Hack Exposes Data of Nearly 20 Million People”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.