A 2025 cyberattack on Oracle’s healthcare business compromised personal and medical information belonging to nearly 20 million people, according to newly released state information cited by Bloomberg.
The affected data reportedly included Social Security numbers, addresses and medical information. Healthcare providers have said records may also include patient names, diagnoses, medications, physicians and test results. About 3 million Texans were among those affected.
Attackers gained access to older Cerner servers after January 22, 2025. Oracle acquired Cerner in 2022 and told customers that the affected data had not yet moved to its cloud infrastructure. The FBI investigated the breach and related extortion attempts against healthcare organizations.
The scale underscores a recurring migration risk: legacy systems can retain the same sensitive data as the destination platform while receiving less attention. Organizations should treat migration environments as production systems, enforce strong authentication and logging, isolate them and verify that old copies are securely removed.
