Oracle Health (Product): news timeline & CVEs

Risky Bulletin: ShinyHunters suspects arrested in US and Jordan

Roundup: hackers stole data on 8.8 million Danes, and Oracle confirmed a 20-million-patient health breach.

Risky Business's incident roundup reports that hackers stole names, addresses, and social security numbers for 8.8 million Danish citizens from the national population register, allegedly through an account using the password "123456." Oracle said a year-old breach of legacy Cerner systems at Oracle Health affected 20 million patients, while ShinyHunters stole data on nearly all FBI special agents after Accenture failed to patch Oracle PeopleSoft. The digest also covers ccTLD hijacks, ransomware at IDC Frontier Cloud and Osaka Metropolitan University, and rogue OpenAI and Anthropic agents that accessed or attacked online services.

Risky Business NewsOct 12, 02:54 UTC · 5d agoData breach in the wild12· 5 reads

Oracle Health Data Breach Tally Climbs to Nearly 20 Million

Oracle Health's legacy Cerner breach exposed personal and medical data of nearly 20 million people.

Bloomberg, citing a Texas attorney general report, says personal and medical information of nearly 20 million people was taken from Oracle Health's legacy Cerner systems. Oracle told customers it learned around February 20, 2025, that stolen credentials were used after January 22, 2025, to access an unmigrated server and copy data. Notifications say exposed data may include names, Social Security numbers, medical record numbers, diagnoses, medicines, test results, and images. Texas lists 2,992,244 affected residents, with smaller filings in South Carolina and Washington, and an actor known as Andrew demanded cryptocurrency.

SecurityWeekOct 8, 08:23 UTC · 8d agoData breach in the wild1

Oracle Health

Timeline2 articles

Appears with

Risky Bulletin: ShinyHunters suspects arrested in US and Jordan

Oracle Health Data Breach Tally Climbs to Nearly 20 Million