JUDGMENT OF RECORD ·
Hospitals now carry the risk of legacy EHR servers, and that pushes consolidation toward Epic. Oracle's 20M breach tally lands as Vandalia drops Oracle.
On Oct 8 SecurityWeek, citing Bloomberg and a Texas attorney general report, said the 2025 attack on Oracle Health's legacy Cerner servers exposed data on nearly 20 million people. Cerner's Texas filing lists 2,992,244 Texans. Oracle has not confirmed the total and declined comment. Fierce Healthcare reported on Oct 9 that a federal judge ruled in June that hospitals cannot contract away liability for the breach.
On Oct 9 Becker's reported that Vandalia Health will replace 27 EHRs, three of them Oracle Health instances, with Epic across 16 hospitals and more than 220 clinics, with one go-live in fall 2028. Vandalia cited a seven-year payback, not security. On Oct 8 Becker's reported FDA 510(k) clearance of Epic's Deterioration Index, built on 195 EHR inputs. Yesterday's call was on apps pressing CMS for record access.
The layer moving is infrastructure. If hospitals share breach liability, an unmigrated legacy server becomes a board risk, and that favors one vendor with one codebase and cleared AI on top. Distribution Capture governs. Confidence is Medium: Oracle has not confirmed the 20 million figure, and Vandalia's switch rests on cost and consolidation.
- CONFIDENCE
- Medium
- HORIZON
- 12 to 24 months
- VS. PRIOR CALL
- New call
WHAT WOULD PROVE THIS WRONG
KLAS's 2027 acute care EHR market share report shows Oracle Health winning more hospitals than it loses, or a health system with 10 or more hospitals moves from Epic to Oracle Health before June 30, 2027.