Nearly 20 Million Patients Affected by Oracle (ORCL) Healthcare Data Compromise

Key Takeaways

• Texas Attorney General reports that Oracle’s healthcare division suffered a breach affecting approximately 20 million individuals’ sensitive information.
• Stolen data potentially includes Social Security numbers, residential addresses, medical diagnoses, prescription information and laboratory findings.
• Meanwhile, Rockland Trust slashed its Oracle position by 40%, though several institutional players increased their holdings significantly.
• ORCL shares opened Tuesday at $142.47, rising 0.1% but trading far below the 52-week peak of $322.54.
• Despite strong Q1 results, insider sales and Michael Burry’s concerns about Oracle’s AI contract backlog continue to weigh on sentiment.

A major cybersecurity breach affecting Oracle’s healthcare operations last year resulted in the exposure of sensitive personal information belonging to nearly 20 million Americans. The scope of the incident was made public Friday through a filing from the Texas attorney general’s office.

Shares of ORCL began Tuesday’s session at $142.47, posting a modest gain of approximately 0.1%. The current price remains significantly below the stock’s 52-week peak of $322.54, which was reached earlier in the year.

Oracle Corporation, ORCL

The security incident originated from legacy infrastructure belonging to Cerner Corp, the electronic health records provider that Oracle acquired in 2022 through a $28 billion transaction. Oracle indicated that the compromised information had not yet been migrated to its cloud infrastructure when the intrusion occurred.

The Texas filing reveals that hackers accessed Social Security numbers, residential addresses and confidential medical records. Approximately 3 million Texas residents were among those impacted by the breach.

Oracle initially notified its healthcare clients about the security incident in March 2025. The company stated at that time that unauthorized access took place after January 22, 2025.

Christus Health and Tri-City Medical Center, two of Oracle’s healthcare clients, publicly acknowledged being affected. Both organizations indicated that compromised information may encompass physician identities, patient diagnoses, medication prescriptions and laboratory test outcomes.

On Monday, Oracle representatives declined to provide additional commentary on the latest disclosure. The Texas attorney general’s office similarly did not respond to inquiries seeking further information.

Oracle’s Government Healthcare Contracts

Oracle’s client roster in the healthcare sector extends beyond civilian hospitals. Both the Department of Defense and the Department of Veterans Affairs rely on Oracle’s health information technology platforms.

When the breach was first disclosed in 2025, a VA representative stated that the agency’s systems remained unaffected. However, the full extent of the security incident’s impact on other federal healthcare networks remains unclear.

The FBI launched an investigation into the cyberattack, including reports that the perpetrators attempted to extort healthcare organizations for ransom payments. Bloomberg initially reported on these extortion attempts in March 2025.

Institutional Trading Activity and Stock Performance

Beyond the cybersecurity concerns, institutional investors have shown divergent behavior regarding ORCL shares. Rockland Trust Co. divested 6,347 shares during the most recent quarter, reducing its holdings by 40% to 9,480 shares valued at approximately $1.3 million.

Conversely, several other institutional investors expanded their positions substantially. Cardano Risk Management increased its stake by 882%, while Auto Owners Insurance amplified its holdings by more than 19,000%.

Oracle’s financial performance remains robust by traditional metrics. The technology giant reported first-quarter earnings of $1.92 per share, surpassing analyst projections of $1.74, while revenue climbed nearly 30% year-over-year to $19.34 billion.

The company plans to distribute a quarterly dividend of $0.50 per share on October 23rd, yielding 1.4% on an annualized basis. Wall Street analysts maintain a “Moderate Buy” rating with a consensus price target of $251.72.

However, skepticism persists among some prominent investors. Michael Burry raised red flags about Oracle’s substantial AI contract backlog, suggesting it could be concealing underlying financial pressure, particularly given negative free cash flow and increasing debt levels.

Recent insider transactions have tilted toward selling. Over the past 90 days, company insiders offloaded 36,075 shares worth $5.3 million, although one director purchased 25,000 shares in late September.

Additionally, Oracle received a force majeure notice related to Project Jupiter, its artificial intelligence data center initiative in New Mexico, with electrical supply and construction setbacks cited as contributing factors.

The post Nearly 20 Million Patients Affected by Oracle (ORCL) Healthcare Data Compromise appeared first on Blockonomi.