Atrium Health, part of Charlotte, N.C.-based Advocate Health, said a data security incident involving EHR vendor Oracle Health may have exposed patient information tied to legacy systems used before the organization transitioned to other EHR platforms.
The incident affected certain patients who received care from Atrium Health in the greater Charlotte area before Aug. 6, 2022, or from Atrium Health Navicent before July 3, 2021, according to a notice published by the health system. Atrium Health said the breach occurred on Oracle Health’s systems and did not involve access to Atrium Health’s own systems.
Oracle Health informed Atrium Health that it became aware of the security incident in February 2025 after an unauthorized third party gained access to certain legacy Cerner systems.
An Oracle Health investigation determined the unauthorized party may have accessed some systems as early as Jan. 22, 2025.
Atrium Health said the EHR vendor contacted law enforcement, engaged cybersecurity specialists and initiated its incident response process to secure the affected systems.
According to the notice, potentially affected information may include patient names, addresses, dates of birth, medical record numbers, providers, diagnoses, medications, test results, medical images and other information contained in medical records. In some cases, Social Security numbers also may have been involved.
Atrium Health said Oracle Health reported the incident did not involve access to credit card or bank account information.
The health system said it completed its review of the incident March 12, 2026, after Oracle Health notified the organization that some Atrium Health patient information was likely affected.
Atrium Health said Oracle Health has implemented additional technical protections and increased monitoring following the incident. The health system also said Oracle Health reported it is not aware of evidence suggesting identity theft or fraud connected to the affected patient data.
Oracle Health is mailing notification letters to identified patients for whom sufficient contact information is available and is offering two years of complimentary credit monitoring services, according to the notice.
Atrium Health is among 16 health systems affected by the Oracle Health breach.
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.