The Texas Attorney General reported a data breach at Oracle Health. The incident impacted nearly 20 million individuals. The breach occurred after January 2025. It compromised personal data, including Social Security numbers, addresses, and medical information. Approximately 3 million affected individuals reside in Texas, Oracle's home state.
Oracle stated attackers used stolen login credentials to access older Cerner servers. Oracle acquired Cerner in 2022. Oracle emphasized the affected data had not migrated to its cloud infrastructure (OCI). The company's cloud systems were not compromised. This marks the first official disclosure of affected patient numbers since Oracle began warning customers about the breach in March 2025.