# Oracle Health Faces Reported Data Breach

A reported breach involving Oracle Health’s legacy Cerner systems may have exposed personal and medical information belonging to nearly 20 million people; Oracle has not publicly confirmed that tally. The incident highlights procurement and oversight risks associated with legacy-system migration, credential security, and protecting sensitive health data. The signal identifies no solicitation, contract opportunity, or procurement contact.

- Government buyers and health-sector contractors should use the incident’s stated risk areas—legacy-system migration, credential security, and sensitive-data protection—to inform oversight of relevant systems and services.
- For contractors supporting health-data environments, the report underscores the importance of clearly documenting security controls and responsibilities for legacy systems and data protection.
- No specific award, procurement timeline, or business opportunity is identified in the signal.

**Jurisdictions:** sled
**Industries:** Healthcare, Information Technology
**Topics:** Cybersecurity
**Published:** October 08, 2026

### Government Entities
- Texas Attorney General

### Vendors
- Oracle Health ()
- Cerner ()

### Sources
- [Oracle Health Data Breach Tally Climbs to Nearly 20 Million - SecurityWeek](https://www.securityweek.com/oracle-health-data-breach-tally-climbs-to-nearly-20-million) - SecurityWeek