20 Million People Had Their Medical Records Stolen And Most of Them Still Don't Know It

-

TL;DR: Oracle Health confirmed that hackers breached its legacy Cerner medical records system and stole data belonging to patients at hundreds of US hospitals. Estimates put the number of affected individuals at roughly 20 million people. Most victims have never received direct notification that their medical records are in someone else's hands.

Last week I got a notification from a hospital I visited two years ago. Not about an appointment. Not about a bill. About a data breach. My name, date of birth, visit dates, and provider information were in a database that someone stole from Oracle Health's servers.

And when I started looking into it, I realized I was one of the lucky ones — at least I found out.

What Actually Happened

Oracle Health, which provides electronic health records software to hospitals under the Cerner brand, confirmed earlier this year that attackers breached its servers using stolen login credentials. The breach specifically hit legacy Cerner data migration infrastructure — systems that stored patient records from hundreds of hospital clients as they were being migrated to Oracle's cloud platform.

The attackers got in sometime in January 2025, and Oracle didn't notice for weeks. By the time they discovered the intrusion, the damage was done. Patient data — including names, dates of birth, medical record numbers, lab results, diagnoses, and in some cases Social Security numbers — had already been copied out.

Why 20 Million People Still Don't Know

Here's where this gets genuinely troubling. Under HIPAA, healthcare providers are required to notify patients of a breach "without unreasonable delay" and within 60 days of discovering it. But Oracle structured this in a way that shifted notification responsibility onto the individual hospitals — not Oracle itself.

Some hospitals sent letters. Many didn't. A lot of those hospitals are still in the process of figuring out which specific patients were affected. Others apparently decided that since they're not sure exactly which records were taken, they don't have to notify anyone yet. The result is that an estimated 20 million people have no idea their medical history is sitting on a hacker's hard drive right now.

The Cerner Legacy Problem

This breach is in some ways a story about what happens when old healthcare IT infrastructure meets modern cloud migration. Cerner was one of the biggest electronic health records vendors in the world before Oracle acquired it in 2022 for $28 billion. The acquisition was supposed to bring Cerner's hospital clients into Oracle's modern cloud ecosystem.

But migration is messy. You can't just flip a switch. Patient data from thousands of hospital visits, going back years, had to be moved piece by piece into the new system. That intermediate state — data sitting in migration infrastructure, temporarily accessible to Oracle employees and contractors — is exactly what the attackers targeted.

It's a risk that exists in virtually every large-scale healthcare IT migration. Data is most vulnerable when it's in transit between old systems and new ones, and that window can stay open for months or years.

What Data Was Taken and What That Actually Means

The specific data varies by hospital, but the confirmed categories include: patient names, addresses, dates of birth, medical record numbers, dates of service, provider names, and in some cases diagnostic codes and medication lists. Some records included Social Security numbers.

Medical data is uniquely valuable to criminals because it doesn't expire the way financial credentials do. You can cancel a credit card. You can't change your date of birth or your medical history. Stolen medical records are used for insurance fraud, prescription fraud, targeted phishing, and identity theft that can take years to unravel.

The going rate for a full medical record on dark web markets is about $250 to $1,000 — roughly 10 times what a credit card number goes for.

What You Can Do Right Now

If you visited a hospital in the US in the last several years, especially one that uses Oracle Health or Cerner systems, it's worth taking a few steps: check whether your hospital has issued any breach notifications (search the hospital name plus "data breach 2025"), monitor your Explanation of Benefits statements from your insurance company for medical services you didn't receive, and consider placing a fraud alert with the credit bureaus if you're concerned. The FTC's IdentityTheft.gov has a good step-by-step guide if you think your medical records may have been misused.

The breach notification process is broken in this country. Twenty million people shouldn't have to find out from a blog post that their medical records were stolen.

What's your experience? Drop a comment below! 👇

Have you received a notification from a hospital about this Oracle Health breach? Or are you just finding out now?

#Cybersecurity #DataBreach #Oracle #Cerner #HealthcareIT #DataPrivacy #TechNews #HIPAA #CyberAttack #InfoSec

Comments

Post a Comment

Popular posts from this blog

Plank You App Support and Privacy

-
Plank You is a simple, ad-free interval timer for planks and core workouts. Set your work and rest times, hold your plank, and let the countdown beeps do the counting. Everything runs on your device. no ads, no accounts, no tracking. How to use Start / Pause / Resume: tap the main button to run or pause the timer. Reset returns to Rep 1 and the start of your work interval. Rep counter — counts up automatically after each full work + rest cycle. Beeps — the last 5 seconds of every phase beep down (5-4-3-2-1), with a longer tone when the phase changes. Changing intervals Tap the settings icon (top right) to choose an interval: 45 / 15 default (45s work, 15s rest) 30 / 30 50 / 10 Custom — set any work and rest time in 5-second steps You can also toggle Beep sounds and Haptics in Settings. FAQ I don't hear any sound. Sound plays even when your ringer is on silent, but make sure the media volume is up and that "Beep sounds" is turned on in Settings. If another app is ...
Read more

WWDC 2026 Preview: Apple Needs to Fix Siri or It's Game Over for Apple Intelligence

-
Apple's WWDC 2026 kicks off on June 8, and the stakes couldn't be higher. While Google announced 900 million Gemini users at I/O last week, Apple is heading into its biggest developer conference with one uncomfortable question hanging over the whole event: what happened to Siri? I've been using Apple devices daily since the original iPhone, and I'll say it plainly — Apple Intelligence has been the most underwhelming software launch in Apple's recent history. WWDC 2026 is Apple's chance to fix that. Here's what they need to announce, what we're expecting, and what a failure would mean. The Problem Apple Needs to Solve When Apple announced Apple Intelligence at WWDC 2024, the demos were impressive. When the features started rolling out through 2025, the reality was a different story. The "new Siri" was slower, less reliable, and often less capable than the old one for basic tasks. The "Personal Context" features that were supposed ...
Read more

This AI Startup Is Worth $26 Billion and Writes 90% of Its Own Code — Should Software Engineers Be Worried?

-
I've been watching the AI coding space very closely for the past year, and every few months something happens that forces me to recalibrate my sense of how fast things are moving. This week, that moment came from Cognition AI — the startup behind Devin, the AI software engineer — which just announced a $1 billion funding round at a $26 billion valuation . But the number that actually stopped me cold wasn't the valuation. It was this: 90% of Cognition's own code is now written by Devin. From $10B to $26B in Eight Months — The Numbers Are Staggering Let's put this in perspective. Just eight months ago, in September 2025, Cognition closed a $400 million round at a $10.2 billion valuation. Today, that valuation has more than doubled to $26 billion. The new round was co-led by Lux Capital, General Catalyst, and 8VC, with Ribbit Capital, Atreides Management, and Peter Thiel's Founders Fund also participating. But what's really driving this isn't hype — it...
Read more