A cyberattack that struck Oracle Health last year compromised the personal and medical information of nearly 20 million individuals. Newly released regulatory filings from the Texas Attorney General’s office revealed the true magnitude of the breach, which includes approximately 3 million affected Texans. The exposed data features sensitive records such as Social Security numbers, physical addresses, medical histories, and specific treatment details. Investigators determined that the intrusion targeted older, legacy servers belonging to Cerner, the health technology firm acquired by Oracle in 2022. Although Oracle previously alerted impacted customers in early 2025, the company had refrained from disclosing the full victim count until now.

Full report : Regulatory disclosures reveal massive scale of legacy Cerner server attack.