Cerner Corporation
14 disclosures across 10 jurisdictions · 2025-06-17 → 2026-07-07. Severity score: 12 across 4 incidents (max per incident: crit=4 high=3 med=2 low=1; per-filing sum: 37).
Scope. This scorecard covers filings naming this entity record. Related records are scored separately: ORACLE CORPORATION (parent record).
1825-day window · this entity as victim
apparent from filed dates · see trail
of 5 clock verdicts
max per incident · per-filing sum: 37
Sector context · Healthcare
- This entity:
- 0.0% on-time (n=5 clock verdicts)
- Sector cohort:
- 19.2% on-time (n=2,370 clock verdicts)
Cohort: 9,572 filings from 4,213 organisations carrying NAICS 62 on the filing itself, same 1825-day window; merged entities counted once. Both percentages count clock verdicts through the same registry — a filing with no evaluable clock is excluded from both rather than counted as on time.
Compliance timing by regulator
Notice timing computed from the dates recorded in each filing — an indicative estimate from an automated clock, not a legal determination. Click any chip for this entity's source filings.
- HIPAA0 on-time · 0 late · 1 informational · 1
- Washington0 on-time · 1 late · 1
- Texas0 on-time · 2 late · 1 informational · 3
- Massachusetts0 on-time · 0 late · 1 informational · 1
- Oregon0 on-time · 2 late · 2
- South Carolina0 on-time · 0 late · 1 informational · 1
us-ca — clock not computable from the dates recorded in the filings
us-il — no notification-clock framework implemented for this jurisdiction
us-ne — no notification-clock framework implemented for this jurisdiction
us-nh — no notification-clock framework implemented for this jurisdiction
Discovery dates behind these clocks: 6 ag web form · 2 letter-grounded · 3 unattributed. Only a date the notification letter itself states is fully defensible; a date derived from another field makes the verdict indicative.
Regulators holding filings from this entity
Every regulator that has received a visible filing naming this entity, all time — filings first.
- Illinois State AG (2)
- New Hampshire State AG (2)
- Oregon State AG (2)
- Texas State AG (2)
- HHS OCR (1)
- California State AG (1)
- Massachusetts State AG (1)
- Nebraska State AG (1)
- South Carolina State AG (1)
- Washington State AG (1)
Breach History (5-Year Lookback)
Historical incident recurrence, cumulative exposure, and per-jurisdiction compliance record
within lookback window
late notice filings
median days between incidents
Per-jurisdiction compliance record
| Jurisdiction | On-time | Late | Rate |
|---|---|---|---|
| us-ma | 0 | 0 | — |
| us-mo | 0 | 0 | — |
| us-or | 0 | 2 | 0% |
| us-sc | 0 | 0 | — |
| us-tx | 0 | 2 | 0% |
| us-wa | 0 | 1 | 0% |
Cumulative data type exposure
Disclosure timeline
Most-recent 100 filings. Click a row to open the disclosure detail.
| Filed | Source | Jurisdiction | Severity | Affected | Clocks missed |
|---|---|---|---|---|---|
| 2026-07-07 | state_ag | us-tx | Critical | 18.6M | TX AG >30d· discovery date: ag web form |
| 2026-07-06 | state_ag | us-or | Medium | 8.3K | OR AG >45d· discovery date: ag web form |
| 2026-06-22 | state_ag | us-nh | High | 60.2Kstate | |
| 2026-06-01 | state_ag | us-il | Medium | — | |
| 2025-12-19 | state_ag | us-nh | High | 58.8Kstate | |
| 2025-08-01 | state_ag | us-il | Medium | — | |
| 2025-07-28 | state_ag | us-tx | Critical | 2.0M | TX AG >30d· discovery date: ag web form |
| 2025-07-25 | state_ag | us-ca | Medium | — | |
| 2025-07-25 | state_ag | us-ne | Medium | — | |
| 2025-07-25 | state_ag | us-or | High | 2.0M | OR AG >45d· discovery date: ag web form |
| 2025-07-25 | state_ag | us-ma | High | 15.1Kstate | |
| 2025-07-25 | state_ag | us-wa | Medium | 802state | WA AG >90d |
| 2025-07-25 | state_ag | us-sc | Critical | 283.9Kstate | |
| 2025-06-17 | ocr | us-mo | Low | 501 |