Archive — US — techcrunch
Oracle under fire for its handling of separate security incidents
Oracle is facing backlash over its response to two separate data breaches, one involving patient data from its healthcare unit and the other related to Oracle Cloud. While Oracle denies any breaches, evidence suggests otherwise, with hackers reportedly attempting to extort affected hospitals. Concerns grow over the company's transparency and communication with both customers and employees.
Key points
- Two data breaches reported: one involving Oracle Health affecting patient data, another concerning Oracle Cloud with potential issues for 6 million customers.
- Oracle Health breach: unauthorized access reportedly occurred on or around February 20, 2025, with attackers stealing data from legacy servers.
- Hackers are reportedly demanding ransom from healthcare providers affected by the Oracle Health breach.
- Oracle denies allegations of a cloud breach even as evidence surfaces, including hacker's data samples that seem genuine.
- Internal criticism from employees over lack of communication and transparency about the incidents.
Why it matters
- The incidents reflect ongoing trends in cybersecurity threats facing healthcare and cloud service providers, growing concerns post-COVID-19.
- Ransomware threats have surged in recent years, making data security a critical concern for the tech industry, especially with the boom in digital health services.
- Increased scrutiny and regulatory requirements around patient data protection are relevant as governments push for stricter measures post-breach.
Oracle's inadequate response to these breaches raises serious questions about its data security practices, transparency, and customer trust, urging stakeholders to demand greater accountability from the tech giant.