Oracle Health Discloses 2025 Breach Affected Nearly 20 Million

Bloomberg reports, citing a Texas attorney general disclosure, that Oracle Health's 2025 data breach compromised personal information of nearly 20 million people nationwide, including almost 3 million Texans. The breach involved older Cerner servers accessed by attackers sometime after January 22, 2025, before that data had been migrated to Oracle's cloud. Exposed information varied by patient but could include names, addresses, Social Security numbers, physicians, diagnoses, medications and test results. Oracle's healthcare customers include hospitals, clinics, the Defense Department and VA, though the VA said it was not affected; at least 29 hospitals and health systems have reported impact, and Oracle Health faces litigation over the incident.