Oracle Health cyberattack exposes data of nearly 20 million people

A cyberattack targeting Oracle Health has exposed the personal information of nearly 20 million people, according to a report from the Texas Attorney General’s office. The breach, which occurred after January 22, 2025, involved the theft of sensitive data including Social Security numbers, addresses, medical diagnoses, medications, and test results.

Oracle reported that the attackers targeted legacy Cerner servers—part of the technology suite acquired by Oracle in 2022—before the data could be migrated to Oracle’s cloud storage. Cybersecurity firm CyPro stated that hackers obtained customer credentials to access two specific Cerner servers and copy patient data.

The affected population includes customers of Oracle Health, such as hospitals and clinics in Texas and other states, as well as the U.S. Department of Defense and the Department of Veterans Affairs. Of the total affected, approximately 3 million individuals are residents of Texas.

Specific healthcare providers, including CHRISTUS Health in Texas and Tri-City Medical Center in California, have acknowledged the breach. CHRISTUS Health is providing affected patients with two years of complimentary credit monitoring and identity protection services.