Skip to content
Oracle Health Breach Affects Nearly 20 Million Individuals

Oracle Health Breach Affects Nearly 20 Million Individuals

First seen 7 Oct 2026, 07:27 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 7, 2026 at 07:28 UTC
  • •Oracle's healthcare breach compromised data of nearly 20 million individuals.
  • •Attackers accessed legacy Cerner infrastructure using compromised credentials.
  • •The breach's scope includes at least 29 hospitals, with potential for more.

A cybersecurity breach at Oracle's healthcare unit compromised personal information of nearly 20 million people, as disclosed by the Texas Attorney General on October 2, 2026. The breach, which began in January 2025, involved attackers using compromised customer credentials to access legacy Cerner infrastructure. Among those affected, approximately 3 million individuals are from Texas. The scale of the breach is significant, with at least 29 hospitals and health systems acknowledging their involvement. Earlier estimates had reported around 14,485 individuals affected, but the new figure represents a substantial increase. The FBI has been investigating the cyberattack, which involved attempts to extort medical companies for ransom. The exact number of affected organizations may be higher than currently reported, with earlier estimates suggesting up to 80 hospitals could be involved. As of now, the total number of affected individuals has not been independently verified.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2025-01-22
Breach began
Attackers accessed Oracle's legacy Cerner infrastructure using compromised credentials.
cypro.co.uk
2026-10-02
Texas AG disclosure
Texas Attorney General disclosed that nearly 20 million individuals were affected by the breach.
cypro.co.uk
2026-10-06
Public reporting
Bloomberg reported on the breach, confirming the scale and impact on personal data.
Uk.Finance.Yahoo

More articles in this cluster (2)

Following this threat?

Track Cerner in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (5)

1 / 3

Common questions

How many individuals are affected?
Nearly 20 million individuals are reported to be affected by the breach.
What information was compromised?
Compromised data includes Social Security numbers, addresses, and medical information.
What should affected organizations do?
Organizations should assess their exposure and ensure they have adequate security measures in place.