Oracle suffered a cyberattack in 2025 that exposed the personal and medical data of nearly 20 million people, including approximately 3 million in Texas. The breach occurred through old servers inherited from Cerner, the medical records company acquired by Oracle in 2022 for $28 billion, primarily affecting the group’s health division. The intrusion took place on January 22, 2025 using stolen credentials, and Oracle only detected the attack on February 20, nearly a month later. The toll progressively skyrocketed from 14,485 victims recorded in August 2025 to nearly 20 million a year later, a 1,400-fold increase. A blackmailer calling himself « Andrew » demanded millions of dollars in cryptocurrency from the affected healthcare facilities, although no hospital appears to have paid at this stage.
Source: Read the original article
