Last year’s healthcare data breach at Oracle impacted 20M people: Report
Earlier this year, technology journalists at Bleeping Computer broke the news that Oracle Health, a cloud data company, had suffered at least one data breach sometime in 2025. Journalists at the outlet had reviewed private correspondence between Oracle and its hospital and healthcare organization customers, in which the company confirmed the attack.
The data, Oracle said, was from a legacy server and not its cloud environment.
The story has many moving parts, pieced together through multiple media reports.
In an April report, Bloomberg revealed that the company has actually suffered multiple related data breaches. Now, new coverage from the outlet shows the incident impacted 25 million people, with the source coming from the Texas Attorney General’s office.
Exposed details included names, Social Security numbers, contact information, and certain medical records from patients of hospital and health system customers, Bloomberg said.
As reporters at Bloomberg noted, clients of Oracle’s healthcare data wing include the U.S. Department of Defense and Veterans Affairs, meaning many of the victims of the data breach could be military personnel and public officials.
Ransoms demanded
Hackers appear to have been motivated by financial gain, demanding ransoms and threatening to leak the data. Bleeping Computer reported at the time that a threat actor calling himself “Andrew” had begun reaching out to patients directly, seeking payment in cryptocurrency in exchange for having their personal data deleted from the data archive stolen from Oracle.
Shortly after that initial report, cybersecurity research firm Trustwave revealed in a blog that it had found data from Oracle on the dark web, with cybercriminals claiming it was information taken from the Oracle Cloud, the environment the company denied had been breached.
Oracle maintains that its cloud infrastructure was not hacked, and the cyberattacks were from a legacy server environment. The incident was said to have happened sometime in late 2025.
HealthExec previously reached out to Oracle for comment but did not receive a reply.
For more on this developing story, read Bloomberg's full coverage at the link below.
Chad is an award-winning writer and editor with over 15 years of experience working in media. He has a decade-long professional background in healthcare, working as a writer and in public relations.