An Indiana health system says the data of 263,000 individuals was affected when Oracle Health was hacked in early 2025.
Terre Haute-based Union Health started notifying affected individuals in April that it had been contacted earlier in the year by an unauthorized party claiming to be in possession of patient data and determined the incident likely originated with Oracle Health. Oracle Health told the health system it experienced a hack in its data migration environment sometime after Jan. 22, according to Union Health’s notice.
The notice was contained in a federal class-action lawsuit filed May 6 by a Union Health patient against the health system and Oracle Health for failing to protect patients’ data. Oracle Health faces a similar complaint filed in April.
Union Health reported to HHS in April that 262,831 individuals were affected and said breached data may have included Social Security and driver’s license numbers, dates of birth, insurance information, treatment information, medications and diagnoses.
“Due to developments in the vendor’s ongoing investigation, we cannot comment at this time,” a Union Health spokesperson told Becker’s.
Becker’s reached out to Oracle Health for comment.
