Home / Technology / 20 Million Records Exposed in Oracle Health Cyberattack
20 Million Records Exposed in Oracle Health Cyberattack
18 Oct
Summary
- Nearly 20 million people affected by cyberattack on older Cerner systems.
- Hackers may have stolen Social Security numbers, diagnoses, and medical images.
- Attackers demanded millions in cryptocurrency to prevent data release.

Nearly 20 million people have had their sensitive medical and personal information compromised due to a cyberattack on older Cerner systems, now part of Oracle Health. The breach, which began in early 2025, came to light as filings revealed its vast scale, affecting approximately 19.9 million individuals nationwide.
Investigators discovered that stolen credentials were used to access a legacy server after January 22, 2025, leading to the copying of patient data. This information could include full names, Social Security numbers, diagnoses, medical images, and treatment details.
The attackers allegedly demanded millions in cryptocurrency, threatening to leak or sell the stolen records. This incident is one of the largest healthcare data breaches in U.S. history, raising critical questions about the security of patient data on older systems.
Patients are advised to watch for breach notifications, consider credit freezes if their Social Security number was exposed, and meticulously review medical records and insurance statements for any anomalies. Strengthening account security and using antivirus software are also recommended protective measures.