In early 2025, Oracle Health (formerly Cerner) experienced two significant cybersecurity incidents that impacted multiple U.S. healthcare providers.
🔍 What Happened?
- Breach #1 (Feb 2025): Hackers used stolen credentials to access a legacy server, exfiltrating protected health information (PHI).
- Breach #2 (Reported April 2025): Threat actors accessed a separate system and stole old client log-in credentials, allegedly to extort medical providers.
The FBI and cybersecurity firm CrowdStrike are currently investigating.
Recent Oracle Health Breaches Expose Critical Gaps in Healthcare Cybersecurity