{"id":638545,"date":"2026-10-07T00:14:19","date_gmt":"2026-10-07T00:14:19","guid":{"rendered":"https:\/\/www.newsbeep.com\/il\/638545\/"},"modified":"2026-10-07T00:14:19","modified_gmt":"2026-10-07T00:14:19","slug":"oracle-health-hack-exposes-data-of-nearly-20m-people","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/il\/638545\/","title":{"rendered":"Oracle Health Hack Exposes Data of Nearly 20M People"},"content":{"rendered":"

A cyberattack against Oracle Health last year exposed the personal data of almost 20 million people, the Texas attorney general\u2019s office said in a report, according to Bloomberg<\/a>.<\/p>\n

The personal information taken by the attacker included Social Security numbers, addresses and medical information, Oracle disclosed to investigators. The cybersecurity breach happened after Jan. 22, 2025, and Oracle alerted some customers about it in March of that year, Bloomberg reported. <\/p>\n

Oracle Health is a division of Oracle, which acquired healthcare technology company Cerner for $28.3 billion in June 2022.<\/p>\n

Oracle told its customers that attackers had targeted older Cerner servers before the data stored on them could be migrated to Oracle\u2019s cloud storage service, Bloomberg said. The hacker compromised customer credentials and used them to access two Cerner servers and then copied patient data from those servers, according to UK cybersecurity firm CyPro<\/a>.<\/p>\n

Neither Oracle nor the Texas attorney general specified which hospitals, clinics or other healthcare providers were affected by the data theft.<\/p>\n

CNET reached out to both the Texas AG\u2019s office and Oracle, but representatives did not immediately respond.<\/p>\n

Who\u2019s affected by the Oracle Health breach?<\/p>\n

Oracle healthcare customers include hospitals and clinics in Texas and other states, as well as the Department of Defense and the Department of Veterans Affairs. Of the nearly 20 million people affected, 3 million were Texans.<\/p>\n

Christus Health, a nonprofit healthcare system in Texas, and Tri-City Medical Center in California \u2014 both affected by the breach \u2014 said stolen patient data could include names, Social Security numbers, doctors, diagnoses, medicines and test results, Bloomberg reported.<\/p>\n

Christus said<\/a> that patients whose data was compromised would receive letters about the incident and also would be offered a complimentary two-year membership to credit monitoring and identity protection services.<\/p>\n

CyPro noted Tuesday that at least 29 hospital and health systems<\/a> said they had been affected by the breach.<\/p>\n

\u201cThe incident demonstrates how older infrastructure can remain a material source of third party risk during cloud migration,\u201d Rob McBride, a CyPro founding partner, wrote. \u201cEven though Oracle says its cloud infrastructure was unaffected, data held on two legacy servers was sufficient to expose information potentially belonging to millions of patients.\u201d<\/p>\n

What if your data was stolen?<\/p>\n

Stolen data can be used to make scam attempts much more convincing, especially if the would-be criminals know your name, address or healthcare details, says Cliff Steinhauer, director of information security and engagement at the digital safety nonprofit National Cybersecurity Alliance.<\/p>\n

\u201cIf someone contacts you claiming to be from insurance or a medical provider and asks for sensitive information or demands payment, hang up and call your provider back at a number you know belongs to them (like the back of your insurance card),\u201d Steinhauer told CNET via email.<\/p>\n

Steinhauer said that people whose data was stolen in the Oracle breach should find out what data was taken and use any identity or credit monitoring being offered.<\/p>\n

\u201cKeep an eye on your credit reports, financial accounts and healthcare statements for anything you don\u2019t recognize,\u201d he added. \u201cIt\u2019s always a good idea to freeze your credit with all three major credit reporting bureaus as a preventative measure.\u201d<\/p>\n

\t\t\t\t\t\t\t\"Alex\t\t\t\t\t\t<\/p>\n

\t\t\t\t\t\t\t\t\t\t\tEver since being admittedly fascinated by the Cambridge coffee webcam from the 1990s, I’ve written about VPNs, the NFL, smartphones, living wages, over\/unders and everything in between.
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\tSee full bio\t\t\t\t\t<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"A cyberattack against Oracle Health last year exposed the personal data of almost 20 million people, the Texas…\n","protected":false},"author":2,"featured_media":638546,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[114,85,46],"class_list":["post-638545","post","type-post","status-publish","format-standard","has-post-thumbnail","category-business","tag-business","tag-il","tag-israel"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/posts\/638545","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/comments?post=638545"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/posts\/638545\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/media\/638546"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/media?parent=638545"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/categories?post=638545"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/tags?post=638545"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}