New York hospital reports Oracle Health data breach

Advertisement

Glens Falls (N.Y.) Hospital is the latest healthcare organization to reveal it was ensnared in the early 2025 hack of Oracle Health.

Oracle Health has begun notifying Glens Falls patients whose data was compromised when an unauthorized party accessed the EHR vendor’s systems as early as January, according to an August notice.

“In response, Oracle Health stated that it initiated its incident response process and took steps to secure the impacted systems,” the hospital stated. “Oracle Health also began an investigation, engaged external cybersecurity specialists, and engaged with federal law enforcement.”

Glens Falls Hospital hasn’t used Oracle Health as its EHR vendor since November, when its parent organization, Albany Med Health System, switched to Epic.

“It is important to note that this incident occurred at Oracle Health,” the hospital stated. “It did not involve Glens Falls Hospital’s computer systems or current electronic health records platform.”

Oracle Health provided the hospital with a list of affected patients June 6, according to the notice. The breached data may have included patient names, Social Security numbers and medical records.

Advertisement

Next Up in EHRs / Interoperability

Advertisement