← Latest briefing

Health

Texas report reveals Oracle Health cyberattack exposed data of 20 million people

CNET reports that a cyberattack exposed medical and personal data belonging to nearly 20 million individuals.

The short version

  • A cyberattack against Oracle Health compromised personal records belonging to almost 20 million people, including 3 million Texas residents.[CNET]
  • The breach compromised sensitive data including Social Security numbers, residential addresses, and medical information across at least 29 health systems.[CNET]
  • Intruders targeted legacy Cerner servers after January 22, 2025, prior to planned migrations into Oracle cloud storage.[CNET]

Key facts

  • A cyberattack targeting Oracle Health compromised the personal records of almost 20 million people.[CNET]
  • The compromised information included medical records, Social Security numbers, and physical addresses.[CNET]
  • Attackers breached older Cerner systems after January 22, 2025, prior to data migration into Oracle's cloud infrastructure.[CNET]
  • At least 29 hospital and healthcare networks reported being affected by the breach.[CNET]
  • Around 3 million of the impacted individuals were located in Texas.[CNET]

What remains uncertain

  • The complete extent of affected health systems remains unverified beyond the 29 systems that have publicly confirmed involvement.[CNET]

Sources

Outlet counts describe coverage, not independent confirmation. Reports may share a wire service or original source.