Texas AG: Oracle Health Breach Exposed 20 Million People
The Texas attorney general's office says a cyberattack on Oracle Health exposed the personal data of almost 20 million people, including 3 million Texans.
The Texas attorney general's office said a cyberattack against Oracle Health exposed the personal data of almost 20 million people, according to CNET. Of those affected, 3 million were Texans.
The data taken included Social Security numbers, addresses and medical information, according to Oracle's disclosure to investigators.
Oracle alerted some customers about the breach in March 2025. Hackers compromised customer credentials to access two Cerner servers and copied patient data, according to the cybersecurity firm CyPro.
On Tuesday, CyPro said at least 29 hospital and health systems reported being affected. Among them were Christus Health and Tri-City Medical Center, which said stolen patient data could include names, Social Security numbers, doctors, diagnoses, medicines and test results, according to Bloomberg.
Christus Health said affected patients would receive letters and a complimentary two-year membership to credit monitoring and identity protection services.
Background
Oracle acquired healthcare technology company Cerner for $28.3 billion in June 2022. The breach occurred after January 22, 2025.
Quick answers
How many people were affected by the Oracle Health breach?
The Texas attorney general's office said almost 20 million people were affected, including 3 million Texans.
What data was exposed in the Oracle Health breach?
The data taken included Social Security numbers, addresses and medical information, according to Oracle's disclosure to investigators.
When did Oracle alert customers about the breach?
Oracle alerted some customers about the breach in March 2025.