UnknownOtherIDENTITY_GOVERNMENTPHIPIICritical
Cerner Corporation
bd_e36a95d7c53add13 · schema v1 · pii pii-v1
Full breach record for Cerner Corporation →Cerner Corporation based in Kansas City, Missouri, a healthcare – medical provider entity reported a data breach to the Texas Attorney General. The breach was discovered on 2025-02-20 and reported on 2026-07-07. 2,658,388 Texas residents were affected. 18,565,730 individuals affected in total. Types of information involved: Name of individual;Address;Social Security Number Information;Medical Information. Consumers were notified via U.S. Mail.
Texas clock✗ TX AG >30d17 months discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_1cf557c8f978720eOregon State AGfiled 2026-07-06(1d gap)Verified
- bd_5aaa91f7765d92b0New Hampshire State AGfiled 2026-06-22(15d gap)Verified
Source provenance
- Source URL
- https://oag.my.site.com/datasecuritybreachreport/apex/DataSecurityReportsPage#BR-0005159
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 7, 2026
- Raw hash
- a08767cd5320273a12641d4d41f3117aa42911c2a9623f47d313fc58cfebf18c
Reporting entity
- Name
- Cerner Corporationnorm: cerner
- Domain
- cerner.com
Victim entity
- Name
- Cerner Corporationnorm: cerner
- Domain
- cerner.com
- Industry
- Otherllm
Incident
- Discovered
- Feb 20, 2025
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- 2,658,388
- Data types
- IDENTITY_GOVERNMENTPHIPII
- Attack vector
- Unknown
- Threat actor
- External
Compliance
- Time to disclose
- 17 months(502 days from discovery to filing)
- Compliance flags
- TX AG >30d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.