ORACLE HEALTH DATA BREACH TALLY CLIMBS TO NEARLY 20 MILLION

Summary from the TLDR InfoSec newsletter

A cyberattack on Oracle Health's legacy Cerner servers around February 20, 2025, exposed the personal and medical data of nearly 20 million people. The attacker used stolen customer credentials to access an old server not yet migrated to Oracle Cloud, copied data, and then demanded millions in cryptocurrency from hospitals while running public sites to pressure victims.