OpenAI executive addresses AI safety fears and government system hack

Chris Lehane, the Chief Global Affairs Officer at OpenAI, recently discussed the investigation into a hack involving an Australian government Medicare portal. In an interview, he provided insight into the security incident that occurred in July and shared some findings from their ongoing review. Additionally, he responded to a Fox News poll indicating that a significant majority, about 71 percent, of Americans are against local AI data centers.

When visiting a doctor or hospital, privacy of medical information is a key expectation. Yet, a concerning cyberattack involving Oracle Health has prompted serious reflection on data protection measures. This incident exposed the personal and medical information of nearly 20 million individuals and involved outdated Cerner systems. Although the attack initially took place in early 2025, details about its extent continue to unravel. The implications for patients extend beyond just compromised passwords; it appears that Social Security numbers, diagnoses, and even medical images might have been accessed.

Oracle Health breach reportedly affects nearly 20 million people

The situation with Oracle Health’s data breach has turned out to be much more extensive than earlier communications suggested. Recent filings with the Texas Attorney General indicate that approximately 19.9 million people were affected by the breach involving legacy Cerner systems. A report released on October 2, 2026, showed that nearly 3 million Texas residents were impacted, while the total number across the country stands close to 20 million.

While Oracle hasn’t confirmed this total in public statements, if accurate, it ranks as one of the largest healthcare data breaches in U.S. history. The breach involved older systems from Cerner, an electronic health records company acquired by Oracle in June 2022 for around $28.3 billion. Cerner’s technology is crucial for hospitals and healthcare providers to manage patient data effectively, which raises concerns about how unauthorized access can compromise records across various healthcare entities.

How hackers broke into Oracle Health’s older systems

The breach reportedly began in early 2025, prompting Oracle to start notifying healthcare clients about unauthorized access in March. By late February 2025, they were aware of an attack where the perpetrators utilized stolen customer credentials to infiltrate a legacy server. This unfortunate reality raises questions about how secure sensitive patient information remains on older systems, especially post-acquisition by a major technology firm.

Hackers reportedly demanded millions to keep medical records private

In an alarming twist, the attacker sought to monetize the stolen information by demanding substantial cryptocurrency payments from affected hospitals. Reports suggest that the individual, known as “Andrew,” contacted these facilities with threats of disclosing or selling the personal data unless his terms were met.

This situation is troubling for hospitals. Even if they decide to pay, there’s no assurance that the attacker will delete the stolen records, nor refrain from selling them. Meanwhile, patients might remain completely in the dark about how their information is being leveraged.

What personal and medical information was stolen?

A breach notification sample shared with California regulators reveals the types of information potentially exposed. The compromised records may have included:

• Full names and Social Security numbers
• Medical record numbers
• Doctors and diagnoses
• Prescription medications
• Medical test results
• Medical images
• Treatment and care information

Each individual’s exposure may vary, but the combination of personal details and medical information makes this incident particularly alarming. Unlike credit card fraud, individuals cannot simply cancel their medical histories and obtain replacements, which makes the stakes high.

Millions of patients affected across multiple states

State reports provide a clearer picture of the attack’s scale. For example, filings from the Texas Attorney General recorded nearly 3 million affected residents, while Oregon reported around 2 million, and South Carolina noted about 283,000 impacted individuals.

These figures highlight the widespread nature of the breach, though they do not contribute to the total number of around 20 million across the country. Reporting such incidents effectively can be complex. Patients in various states may receive notice at different times, and it often takes a long time for the complete impact of the breach to surface.

How the Oracle Health breach compares with other healthcare attacks

Healthcare organizations have become prime targets for cybercriminals due to the invaluable information medical records hold. A prominent prior attack in 2024 affected about 192.7 million people when Change Healthcare was targeted. In relative terms, while the Oracle Health incident may seem smaller, it still stands as a considerable threat with the reported impact on 20 million individuals.

How to protect yourself after the Oracle Health data breach

You may not even be aware if Cerner technology is used by your hospital, complicating how you might know if your information was compromised. However, there are steps you can take to mitigate the risk of identity theft and medical fraud.

1. Watch for a breach notification

Stay alert for any notifications from Cerner, Oracle Health, or healthcare providers, detailing what information might have been compromised and any protective measures available.

2. Freeze your credit if your Social Security number was exposed

Consider placing a credit freeze to prevent misuse of your identity. This can be done at no charge through the major credit bureaus.

3. Check your medical records and insurance statements

Regularly review your health insurance statements for any unfamiliar charges or services. Spotting discrepancies early is crucial as medical identity theft can result in long-lasting issues.

4. Use strong antivirus software

Given the nature of this breach, it’s wise to invest in robust antivirus protection to guard against potential follow-up scams.

5. Be alert for convincing medical scams

If you receive calls from individuals familiar with your treatment or provider, be cautious. Always verify their identity using contact information from official sources.

6. Strengthen your account security

Utilize unique passwords for healthcare portals and activate two-factor authentication wherever it’s available. This helps maintain the integrity of your accounts.

7. Consider identity theft protection

If your Social Security number was part of the breach, monitoring services can help watch for unusual activity involving your personal information.

Kurt’s key takeaways

This incident with Oracle Health underscores how little control patients can have over the security of their sensitive medical information. Even with all precautions taken, personal data may still be vulnerable on servers that you might not even know exist. Plus, the fact that this breach was tied to a legacy server only adds to the frustration. Protecting existing data during a technology acquisition should be paramount, yet patients continue to face uncertainty about their records long after the fact.