An estimate attributed to a Texas Attorney General report puts the number of people affected by a 2025 Oracle Health breach at nearly 20 million, including about 3 million Texans. The estimate was reported in early October 2026, months after Oracle’s customer notifications about the incident.
Reported information and legacy Cerner servers
Reportedly involved information included Social Security numbers, addresses and medical information. Christus Health and Tri-City Medical Center reportedly said the information could vary by patient and include names, doctors, diagnoses, medications and test results.
Oracle reportedly told some customers that unauthorized access involved older Cerner servers. Data on those servers had not yet been migrated to Oracle cloud storage.
What Oracle’s 2025 notice reportedly said about timing
Oracle reportedly notified some customers in March 2025. The notice said unauthorized access occurred after January 22, 2025, and involved the older Cerner servers.
