Oracle (ORCL) Stock News: Oracle Health Breach Reportedly Reaches Nearly 20 Million Patients

The 2025 breach of legacy Cerner servers, now operated by Oracle as Oracle Health, reportedly reaches nearly 20 million people, according to OpenClassActions, citing a Texas Attorney General portal entry and reporting by Bloomberg and HIPAA Journal.
What happened
Cerner’s filing in Oregon’s breach database lists a breach window of January 22 to April 1, 2025, discovered February 20, 2025, involving servers that had not yet been migrated to Oracle Cloud. On October 2, 2026 the Texas portal posted an entry listing 2,992,244 Texans notified by mail, with addresses, Social Security numbers and medical information among the data types. Oracle has not publicly confirmed a nationwide total, and the federal HHS breach portal still showed a placeholder figure.
The litigation
A consolidated patient class action against Cerner, Oracle and named hospitals survived motions to dismiss, which were largely denied on June 22, 2026. No class has been certified, there is no settlement, and the allegations are unproven.
Why it matters for the stock
For readers following ORCL, the financial exposure is small against Oracle’s scale, but the reputational one is not: Oracle Health is central to the company’s pitch to hospitals, and a breach count near 20 million would rank among the largest health-data incidents on record. The migration of remaining legacy Cerner systems to Oracle Cloud is the operational item to watch.
Read the full case page on OpenClassActions.
Published October 21, 2026. Informational reporting, not legal or investment advice. TickerPosts and OpenClassActions.com share a founder. Settlements resolve claims without an admission of wrongdoing, and allegations in pending lawsuits are unproven.