Oracle Health data breach exposes nearly 20 million patients

A cyberattack involving legacy Cerner systems, now part of Oracle Health, reportedly compromised personal and medical information belonging to nearly 20 million people. The scale, if confirmed, would make the incident one of the largest healthcare data breaches in US history and raises concerns about the protection of sensitive patient records.

A Texas Attorney General filing lists 2,992,244 affected Texas residents, while the reported nationwide total is 19,929,149; Oracle has not separately confirmed that total publicly. Oracle said it became aware of unauthorised access around 20 February 2025, and investigators found evidence that stolen customer credentials were used to access a legacy server. The attacker allegedly copied data and later demanded cryptocurrency payments, threatening to leak or sell it.