Breachesby GlyphOracle
Disclosed Mar 28, 2025Unverified
Hacker steals patient data from legacy Oracle Health (Cerner) servers
Oracle Health privately told hospital customers that an attacker used compromised customer credentials to access legacy Cerner data migration servers after January 22, 2025, copying data that may include patient records; it learned of it around February 20, and the attacker tried to extort hospitals.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Mar 28, 2025 |
| Discovered | Feb 20, 2025 |
| Attack | Hacking |
| Data exposed | HealthNames |
| Sector | Healthcare · US |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
Sources
Notices filed
Other breaches at Oracle
Clop exploits Oracle E-Business Suite zero-day to steal data from dozensSupply chain exposed employment records, financial details, internal documents, Social Security numbers and names.Supply chainTechUSOct 2, 2025Hacker steals Oracle Cloud SSO login data; Oracle blames obsolete serversHacking exposed emails, credentials and tokens and passwords.HackingTechUSUnverifiedMar 21, 2025
History of this record
First recordedby seedSource
First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.