The 2025 Oracle Health breach affected nearly 20 million people nationwide. Information released by the Texas Attorney General and reported by Bloomberg on Oct. 5, 2026 gave the first public total, according to the Fierce Healthcare account of the Bloomberg report.
Oracle Health is the electronic health record vendor Oracle acquired as Cerner in June 2022 for about $28.3 billion. Its Oct. 2 entry on the Texas Attorney General breach portal lists 2,992,244 affected Texans, with notices sent by U.S. mail.
Table of Contents
- How attackers got in
- What data was exposed
- Why the count took a year to surface
- What to do if your provider notifies you
How attackers got in
Attackers used compromised customer credentials to reach legacy Cerner servers not yet migrated to Oracle Cloud. Unauthorized access began after Jan.
22, 2025, according to the SecurityWeek tally. Those older systems held hospital patient data from before the cloud move. Stolen logins let intruders enter without breaking Oracle Cloud itself.
What data was exposed
Exposed records included names, addresses, Social Security numbers, and medical-record numbers. They also included diagnoses, medications, test results, images, and physician names, according to the HIPAA Journal breakdown.
That mix raises risk for identity theft and medical fraud. A Social Security number can support new accounts, while diagnosis and medication details can support targeted scams.
Why the count took a year to surface
Oracle said it learned of the event around Feb. 20, 2025.
It began warning hospital customers in March 2025, while the national scale stayed undisclosed for over a year. Texas then supplied the first statewide and nationwide figures. The federal health breach portal still lists a 501-person placeholder for the incident, so patients must rely on provider letters for now.
What to do if your provider notifies you
Affected hospitals are notifying patients by mail through their providers. Watch for a letter from your hospital or clinic, not from Oracle directly.
- Open provider mail promptly and follow its instructions
- Monitor credit reports, bank statements, and medical bills
- Ask credit bureaus about a fraud alert or freeze
- Report unfamiliar medical charges to your provider
You Might Also Like
- Secure Healthcare Information Management Faces Data Breach Lawsuit
- Healthcare Highways Data Breach Exposed What PHI and PII?
- Why Two People Affected by the Same Data Breach May Face Different Risks