ChristianaCare vendor Oracle Health exposed in cybersecurity incident Show Caption Hide Caption Millions of Americans personal info hacked in data breach Millions of Social Security numbers were hacked after a massive data breach. Here's how to protect yourself. ChristianaCare has announced that a cybersecurity incident of its third-party electronic medical records vendor Oracle Health, formerly Cerner Corp., exposed patients' information and medical records. Delaware's largest health care provider did not release the number of affected patients, but letters are being mailed to patients whose information was involved in this incident. The data varied by patient, but it could include names; Social Security numbers; and patient medical records, such as medical record numbers, doctors, diagnoses, medicines, test results, images, care and treatment. DATA BREACH: How to protect your information after it has been compromised "ChristianaCare’s IT systems were not impacted, and there was no disruption to ChristianaCare’s clinical operations," according to a Nov. 26 statement issued by ChristianaCare. When did the data breach occur? Oracle Health informed ChristianaCare in April that an unauthorized third party gained access to legacy Cerner systems as early as Jan. 22. On Sept. 29, Oracle Health provided ChristianaCare with a list of patients whose information may have been involved in the breach. The data breach affected multiple health care organizations across the countr

A breach at Oracle Health has resulted in the theft of patient data from legacy servers impacting multiple US healthcare organizations and hospitals. Unauthorized access by a threat actor after January 22, 2025, led to the exfiltration of Electronic Health Records (EHR) data with potential violations of HIPAA laws. There is uncertainty whether ransomware was involved, but Oracle Health's response has been criticized for lack of transparency and failure to provide proper guidance and documentation, leaving hospitals to navigate the aftermath themselves.