The Oracle breaches have led to multiple lawsuits. First, on March 31, 2025, a lawsuit was filed in the Western District of Texas alleging that Oracle failed “to implement reasonable and industry standard data security practices to properly secure, safeguard, and adequately destroy sensitive personal identifiable information.” Second,a lawsuit was filed in the U.S. District Court for the Western District of Missouri against Oracle Health, alleging negligence in securing sensitive patient data following Oracle’s 2022 acquisition of Cerner. The plaintiffs claim they were not notified of the breach and now face increased risks of identity theft. The lawsuit seeks damages and injunctive relief requiring Oracle Health to strengthen its cybersecurity measures and increase transparency.

Parts of this article appeared earlier in the American Bar Association website.