Cerner
Disclosed Jun 17, 20251 year ago18,565,730 affectedConfirmed
Cerner reported that it experienced a cyberattack that compromised the protected health information (PHI) of 501 individuals. Cerner was acquired by Oracle Corporation in 2022, and as a result, the investigation has closed since Cerner is no longer a covered entity.
What is known
| People affected | 18,565,730 (as reported by the organization) |
|---|---|
| Disclosed | Jun 17, 2025 |
| Discovered | Feb 20, 2025 |
| Happened | Jan 22, 2025 |
| Attack | Hacking |
| Data exposed | Social Security numbers, Health, Addresses, Names |
| Sector | Tech · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Cerneroag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: Cerneratg.wa.gov · Official notice | Official notice |
| Oregon DOJ breach notice: Cernerjustice.oregon.gov · Official notice | Official notice |
| Texas Attorney General data security breach report BR-0005159: Cerneroag.my.site.com · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Cerner (Business Associate, MO)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Jun 17, 2025 | 501 |
| California AGresidents of CA | Jul 25, 2025 | |
| Washington AGresidents of WA | Jul 25, 2025 | 67,911 |
| Oregon DOJresidents of OR | Jul 25, 2025 | 1,970,332 |
| Oregon DOJresidents of OR | Jul 6 | 8,329 |
| Texas AGresidents of TX | Jul 7 | 2,658,388 |
History of this record
- 2026-09-25 · disclosed: 2025-07-25 to 2025-06-17 · backfill source
- 2026-09-25 · summary: empty to Cerner reported that it experienced a cyberattack that compromised the protected health information (PHI) of 501 individuals. Cerner was acquired by Oracle Corporation in 2022, and as a result, the investigation has closed since Cerner is n · backfill source
- 2026-09-25 · data_types: [] to ["ssn","health","addresses","names"] · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 18565730 · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · discovered: empty to 2025-02-20 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.