Cerner Corporation

Cerner Corporation based in Kansas City, Missouri, a healthcare – medical provider entity reported a data breach to the Texas Attorney General. The breach was discovered on 2025-02-20 and reported on 2026-07-07. 2,658,388 Texas residents were affected. 18,565,730 individuals affected in total. Types of information involved: Name of individual;Address;Social Security Number Information;Medical Information. Consumers were notified via U.S. Mail.

Cerner Corporation reported a data breach to the Oregon Attorney General. The breach was reported on 2026-07-06. The breach occurred during 1/22/2025 - 4/1/2025. The breach was discovered on 2/20/2025. 8,329 individuals were affected. Notice was sent on 6/22/2026.

Cerner Corporation submitted a supplemental breach notification to the New Hampshire Attorney General on June 22, 2026, updating the count of affected individuals to 60,247 NH residents. The incident involved unauthorized access to legacy Cerner systems starting January 22, 2025, discovered on March 7, 2025. Affected data included names, SSNs, and PHI. Notification letters were mailed starting July 25, 2025, offering 24 months of credit monitoring.

Cerner Corporation notified the New Hampshire Attorney General of a security incident involving unauthorized access to PHI on legacy systems. The breach affected approximately 58,823 NH residents, exposing names, SSNs, and medical records. Access occurred as early as Jan 22, 2025; discovered Feb 20, 2025. Notifications began June 13, 2025. Law enforcement requested notification delays. Cerner engaged forensic specialists, reset credentials, and implemented network isolation. Affected individuals received credit monitoring and identity restoration services.

Cerner Corporation based in Kansas City, Missouri, a healthcare – medical provider entity reported a data breach to the Texas Attorney General. The breach was discovered on 2025-02-20 and reported on 2025-07-28. 4,082 Texas residents were affected. 1,970,332 individuals affected in total. Types of information involved: Name of individual;Address;Social Security Number Information;Medical Information. Consumers were notified via U.S. Mail.

Unauthorized third party gained access to legacy Cerner EHR systems beginning at least January 22, 2025, obtaining patient personal information including names, Social Security numbers, medical record numbers, diagnoses, medications, and test results. A healthcare provider (the reporting entity's client) was notified on March 7, 2025. Federal law enforcement requested a delay in patient notification pending investigation. Notices were sent July 25, 2025.

Cerner Corporation reported a data breach to the Oregon Attorney General. The breach was reported on 2025-07-25. The breach occurred during 1/22/2025 - 4/1/2025. The breach was discovered on 2/20/2025. 1,970,332 individuals were affected. Notice was sent on 7/25/2025.

Cerner Corporation, a health sector entity reported a unauthorized access incident to the Washington Attorney General. The organization became aware of the incident on 2025-02-20 and filed notice on 2025-07-25. 802 Washington residents were affected. 155 days elapsed between awareness and notification. 29 days to identify the breach. 40 days to contain the breach.

Cerner Corporation reported an unauthorized third-party access to legacy EHR systems starting Jan 22, 2025, discovered March 7, 2025. Data included names, SSNs, and PHI. Federal law enforcement delayed notification. Cerner engaged forensic specialists and offered 24 months of credit monitoring.

Cerner Corporation (MO), a Business Associate now operating as part of Oracle Corporation following a 2022 acquisition, reported to HHS OCR on 2025-06-17 a Hacking/IT Incident affecting 501 individuals. Breached information was located on a Network Server. The investigation has since closed as Cerner is no longer a covered entity. PHI of 501 individuals was compromised.