Oracle
Disclosed Mar 28, 20251 year agoUnverified
Hacker steals patient data from legacy Oracle Health (Cerner) servers
Oracle Health privately told hospital customers that an attacker used compromised customer credentials to access legacy Cerner data migration servers after January 22, 2025, copying data that may include patient records; it learned of it around February 20, and the attacker tried to extort hospitals.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Mar 28, 2025 |
| Discovered | Feb 20, 2025 |
| Attack | Hacking |
| Data exposed | Health, Names |
| Sector | Healthcare · US |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
Sources
| Source | |
|---|---|
| Oracle under fire for its handling of separate security incidentstechcrunch.com · News | News |
| Oracle Health breach compromises patient data at US hospitalsbleepingcomputer.com · News | News |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Mar 28, 2025 |
Other breaches at Oracle
| Breach | Affected | ||||
|---|---|---|---|---|---|
| Clop exploits Oracle E-Business Suite zero-day to steal data from dozensOct 2, 202511 months agoSupply chain | Oct 2, 202511 months ago | Supply chain | Tech | Confirmed | Unknown |
| Hacker steals Oracle Cloud SSO login data; Oracle blames obsolete serversMar 21, 20251 year agoHackingUnverified | Mar 21, 20251 year ago | Hacking | Tech | Unverified | Unknown |
History of this record
- 2026-09-25 · added · seed source
First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.