Oracle Health Server Breach Exposes Patient Data at 80 US Hospitals

Overview

Oracle Health has faced a major data breach, exposing the personal and medical data of nearly 20 million people. The breach occurred when a hacker gained unauthorized access to two legacy Cerner servers that had not yet been migrated to Oracle Cloud.

The breach has affected Texans, Oregonians, South Carolinians, and Washingtonians, with the Texas Attorney General revealing that 2,992,244 Texans are affected. Bloomberg puts the nationwide figure near 20 million patients, impacting as many as 80 hospitals. Stolen data includes names, Social Security numbers, medical record numbers, diagnoses, medications, test results, medical images, and physician names.

Response

Oracle Health has stated that its current systems and Oracle Cloud infrastructure were not hit. The company became aware of the breach on or around March 7th, 2025. A hacker demanded ransom to keep the files from being published. Oracle Health is working to notify affected individuals and is urging those who have not received a notification to contact their healthcare provider.

Investigation

The Texas Attorney General is investigating the breach, while the Oregon, South Carolina, and Washington Attorney General's offices are also looking into the matter. Oracle Health has said that it is cooperating fully with the investigations.

Conclusion

The Oracle Health breach is a serious incident that highlights the need for healthcare organizations to prioritize data security. As the healthcare industry continues to move towards digital transformation, it is essential that organizations take proactive steps to protect patient data from cyber threats.