Oracle Health Responding to Hack of Legacy Cerner EHR Data

Customer Credentials Possibly Compromised at EHR Vendor Acquired by Oracle in 2022 Marianne Kolbasuk McGee (HealthInfoSec) • March 31, 2025

Oracle is dealing with a hacking incident involving legacy patient data of Cerner electronic health record customers. Oracle, which acquired Cerner in 2022, is reportedly telling healthcare clients the hack involved compromised customer credentials that were used to access data on Cerner servers that had not yet been migrated to Oracle Cloud.

See Also: Financial & Banking Services: Cybersecurity Trends from Expel’s 2025 Annual Threat Report

The FBI is also investigating the hack, according to a Reuters report. Hackers on Jan. 22 accessed the legacy servers and exfiltrated copies of patient data, with the aim of extorting multiple U.S. medical providers.

Oracle is telling affected clients that around Feb. 20, the company discovered the cybersecurity ...