Oracle Health Data Breach: Morgan & Morgan Investigates Patient Data Exposure

Morgan & Morgan’s industry-leading data privacy attorneys are investigating Oracle Health regarding its recent data breach (sometimes referred to as a data security incident). The Oracle Health data breach involved unauthorized access to legacy data migration servers, leading to the theft of patient data at multiple U.S. hospitals.

We are investigating, among other things, the following:

• How Oracle Health acquired the sensitive information;
• Whether Oracle Health should have had the sensitive information;
• Why Oracle Health stored this sensitive information in an Internet-accessible environment;
• Whether Oracle Health encrypted the sensitive information it stored in an Internet-accessible environment;
• Whether Oracle Health deleted sensitive information it no longer had a reasonable need to maintain in an Internet-accessible environment;
• Whether Oracle Health implemented appropriate and adequate security measures to protect the sensitive information it stored in an Internet-accessible environment; and
• Whether Oracle Health has provided affected individuals adequate protection and compensation for any harms they have experienced as a result of the data breach.
  
   

On February 20, 2025, Oracle Health allegedly became aware that it experienced a data breach in which unauthorized access to patient data was detected. The breach reportedly began on January 22, 2025, when compromised customer credentials were used to access legacy data migration servers. The stolen data was then copied to a remote server, potentially affecting a significant number of patients.

According to media reports, the Federal Bureau of Investigation (FBI) is investigating this cyberattack, which was allegedly carried out to extort multiple U.S. medical providers.

If you received a data breach notification from Oracle Health or a healthcare provider using its systems, please contact us via our free case evaluation form. 

We place a significant amount of trust in the companies we choose to share our information with, making the actions of Oracle Health all the more unacceptable. If you suspect that your information was exposed in the Oracle Health data breach, Morgan & Morgan is here to help.