Surfshark
You can reset a password. You can’t reset your medical history.
A compromised password can be changed. A stolen bank card can be replaced. But when your medical history is exposed, there’s no reset button.
A cyberattack on Oracle Health’s legacy Cerner systems compromised the personal information of nearly 20 million people, according to October 2026 reporting citing disclosures to the Texas Attorney General. The exposed data included Social Security numbers, addresses, and medical information — details that could leave patients vulnerable long after the breach.
What happened in the Oracle Health breach?
The attack targeted legacy systems belonging to Cerner, the healthcare technology company Oracle acquired in 2022 for roughly $28 billion. The intrusion occurred in early 2025, but the scale reported this October is far greater than earlier notifications suggested.
The breach has also prompted legal action. In June 2026, a federal judge allowed core claims against Oracle Health and eight health systems to proceed, rejecting the providers’ argument that protecting patient data was solely their vendor’s responsibility. The ruling allowed the lawsuit to move forward; it did not establish liability.
Why medical data leaks hit differently
Stolen medical information can make scams feel alarmingly credible. Someone claiming to represent your hospital could mention a real treatment before demanding payment. An email could reference your medication and direct you to a fake patient portal.
These are potential risks, not confirmed outcomes of this breach. But knowing your medical details does not prove a sender is legitimate.
The consequences can also extend to medical identity theft: someone obtaining treatment or submitting insurance claims in your name.
Finland’s Vastaamo psychotherapy breach showed another possible consequence. Patients were directly blackmailed using stolen therapy records containing deeply private information. There is no evidence here of similar extortion following the Oracle Health breach, but Vastaamo illustrates the personal harm compromised clinical records can cause.
What to do if your data was exposed to do if your data was exposed
Start by reading your provider’s breach notification to understand which details were involved. Then take steps suited to the information exposed.
- Monitor for data leaks. Surfshark data leak monitoring monitors supported information, including emails, credit cards, and IDs, and notifies you when it detects exposure. Monitoring cannot remove stolen records, but it can help you respond to detected leaks.
- Filter scam emails and texts. Turn on Surfshark’s scam text protection and use email scam checker to help identify phishing attempts posing as hospital bills or overdue medical fees.
- Check your insurance statements. Review each Explanation of Benefits (EOB) for treatments, dates, or clinics you do not recognize. Report unfamiliar activity to your insurer and provider.
- Review your medical records. If you suspect misuse, request your records and check for unfamiliar prescriptions, diagnoses, or appointments. Ask your provider to investigate incorrect entries.
- Protect your tax identity. An IRS Identity Protection PIN helps prevent someone from filing a federal tax return using your Social Security Number.
- Freeze your credit. Contact Equifax, Experian, and TransUnion to restrict access to your credit files and make unauthorized new accounts harder to open.
- Verify unexpected bills. Hang up and call your provider’s billing office using its official number. Open your patient portal directly rather than following payment links.
How to reduce your exposure to follow-up scams
Alongside checking your records and securing your accounts, use tools that help limit your exposure and identify potential scams.
- Mask your personal details. Surfshark’s Alternative ID creates an alternative online identity for everyday sign-ups, helping you share fewer real details with websites. Use accurate information for healthcare, insurance, and official records.
- Keep your email and phone number private. Use alternative email and alternative number, Surfshark’s US phone number masking solution, to protect your primary contact details when signing up for services. This can reduce future exposure, though it cannot undo information already leaked.
- Check suspicious emails. Before clicking links about diagnoses, appointments, or medical bills, use Surfshark’s email scam checker to check for phishing indicators. It works in Gmail through Surfshark’s Chrome extension with a One or One+ subscription.
- Protect your devices. Keep Surfshark Antivirus and your device software updated to help detect malware, including threats delivered through fake medical documents or downloads.
Your medical history belongs in your care team’s hands. If it has been exposed, reviewing your records and questioning unexpected requests can help prevent further harm.
