FBI investigates oracle cyberattack exposing thousands of healthcare records

In the United States, Oracle has been facing significant security threats following reports of two separate data breaches that have impacted its customers. The most recent incident came to light in March 2025, when it was revealed that Oracle Health, a division that provides healthcare software solutions, had experienced a breach in February. This breach reportedly involved unauthorized access to one of its servers, leading to the theft of sensitive patient data from various hospitals. Customers of Oracle Health were alarmed to receive notifications regarding the breach from lawyers, printed on plain paper and lacking official Oracle branding. This unorthodox notification method raised further concerns among those affected. Additionally, another data breach affecting Oracle Cloud customers was reported just over a week prior. An anonymous hacker using the pseudonym rose87168 claimed to have obtained a sample of approximately 6 million records linked to Oracle Cloud customer authentication. This data was reportedly acquired after exploiting a vulnerability in an Oracle Cloud server. Security experts verified the authenticity of the data, leading to heightened fears regarding the security of Oracle Cloud and its clients. Outside researchers signaled that the severity of the threat was high and it had impacted over 140,000 tenants using the cloud services. Despite the seriousness of these revelations, Oracle has remained largely silent on the matter. When approached for comments, executives from the company abstained from providing any substantial information or acknowledgment of the breaches. This stark lack of transparency has left customers and the public in a state of uncertainty regarding the impact of these incidents on their personal data and overall trust in the company. As the investigation unfolds, the FBI's involvement indicates the escalation of the situation and the severity of its implications. In light of these cybersecurity challenges, Oracle's reputation as a leading provider of technology solutions is now under scrutiny. The company must take decisive action to address these breaches, restore confidence among its customers, and ensure that such security failures do not occur in the future.