Oracle Health Breach Now Affects 29 Hospital Systems
Becker's Hospital Review reports that 29 hospitals and health systems have confirmed patient data was compromised in a 2025 breach of Oracle Health's legacy Cerner systems, with the intrusion dating back to at least Jan. 22, 2025. Affected organizations include Atrium Health, AdventHealth, Christus Health, Baptist Health South Florida, and LifeBridge Health, among others. Oracle Health reportedly asked healthcare organizations to delay patient notification while the investigation continued, and the vendor now faces legal action over the incident. Health systems are continuing to notify patients as the full scope of affected entities becomes clearer.
Providers and Medicaid managed care plans relying on Cerner-based EHR systems face breach notification obligations, potential liability exposure, and compliance scrutiny tied to a vendor-side security failure outside their direct control.
Finance
You might also like