Oracle Cerner Breach: Legacy Servers, 20M People

Oracle Health data breach: legacy Cerner data-migration servers — not Oracle Cloud — accessed with stolen customer credentials starting on or after January 22, 2025, while hospital OCR filings climbed past 410,000 before a Texas attorney general report (October 2, 2026) cited Oracle’s disclosure of nearly 20 million people nationwide, including about 3 million Texans. Corporate Breach walks the verified chain: Feb 20, 2025 vendor awareness, March 2025 FBI/extortion reporting, Union Health and Mosaic Life Care OCR counts, July 2025 state filings listing 4,082 Texans, CHRISTUS and Tri-City provider notices through 2025–2026, and why the separate Oracle Cloud login incident is a different story. Subscribe for more Corporate Breach investigations. Which corporate failure should we open the file on next? Comment below. 0:00 Oct 2, 2026 — Texas A-G ~20M scale 0:27 Jan 22, 2025 — legacy Cerner access window 0:50 $28.3B Cerner deal context 1:18 Stolen credentials analogy 1:44 No public Oracle notice — private letters 2:10 Two Oracle stories (keep them apart) 2:30 Mechanism flow — migration server 2:55 FBI / hospital extortion reporting 3:15 HIPAA mail — who notifies patients? 3:40 Union Health 262,831 OCR 4:08 Mosaic + 410,000+ hospital tally 4:36 July 2025 — Texas 4,082 residents 5:02 Second turn — counts diverge 5:17 CHRISTUS / Tri-City delayed lists 5:49 Human stakes — SSN, diagnoses, labs 6:13 Separate Oracle Cloud incident 6:45 Third turn — migration debt 7:01 Texas A-G ~3M Texans 7:24 4,082 → ~3,000,000 contrast 7:44 ~80 hospitals · class actions 8:06 EHR concentration lesson 8:29 Patient checklist 8:53 Open questions 9:18 Outro / sources Sources: BleepingComputer — https://www.bleepingcomputer.com/news... Reuters (FBI reporting) — https://www.reuters.com/technology/fb... Bloomberg Law (Texas A-G ~20M) — https://news.bloomberglaw.com/privacy... HIPAA Journal (Union Health) — https://www.hipaajournal.com/union-he... Becker's (July 2025 state filings) — https://www.beckershospitalreview.com... CHRISTUS Health notice — https://www.christushealth.org/privac... Tri-City Medical Center notice — https://tricitymed.org/notice-of-orac... Counts follow public notices, OCR filings, and regulator reporting — we do not invent a company-wide total beyond what those sources state. #OracleHealthDataBreach #OracleCernerBreach #CernerDataBreach #TexasDataBreach #HIPAABreach #CorporateBreach #Cybersecurity