Oracle Health Hack Exposes Medical Records of 20 Million Patients
A cyberattack targeting Oracle Health's legacy Cerner electronic health record systems — the software hospitals use to manage patient care information digitally — is reported to have leaked the personal and medical data of roughly 20 million people. The attack dates back to early 2025.
The true scale of the breach came to light through new documents recently filed with the Texas attorney general. The Texas attorney general's data breach portal posted the Cerner-related filing on October 2, 2026, stating that more than 2.99 million Texas residents (2,992,244) were affected. The total number of individuals affected stands at more than 19.9 million (19,929,149). Oracle has not officially confirmed the nationwide scope of the damage in connection with the incident.
For patients, this breach goes far beyond a simple password leak. According to reports, hackers may have obtained highly sensitive personal information, including Social Security numbers, diagnosis details, and medical imaging. Concerns over privacy protection are growing as a result.
The incident illustrates the scale of privacy risks posed by medical data. The extent of the damage is being confirmed step by step through postings on the authorities' portal.
