Where does the Cerner Corporation case file come from?

Every entry is taken from the breach report Cerner Corporation lodged with the Oregon Attorney General. Nothing here is estimated.

Why do the incident date and the report date differ?

Companies usually investigate before they report. The gap between the two dates shows how long that took.

What does the records-affected figure count?

It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.

Does this case file change over time?

Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Case file

Case File: Cerner Corporation Data Breach

This file collects the dated facts on record for the Cerner Corporation incident. The state report is dated July 6, 2026. The incident itself is dated January 22, 2025.

Timeline

530 days separate the incident date from the date it was reported.

January 22, 2025Incident dateWhen the filing says the breach took place.
July 6, 2026Report filed in OregonDate the notice was lodged with the Oregon Attorney General.

Case facts

Filing state: Oregon
Date reported: July 6, 2026
Incident date: January 22, 2025
Receiving office: Oregon Attorney General

Case notes

Cerner Corporation, a prominent healthcare information technology provider, has publicly reported a data security incident that occurred on January 22, 2025. This event was formally disclosed through a filing in Oregon on July 6, 2026, and is currently under investigation by the company.

Details regarding the nature of the breach type, such as whether it involved unauthorized access, a system error, or another cause, have not been specified in the public records. Similarly, the exact categories of personal information potentially exposed are not identified, requiring affected individuals to consider the general impact on their data.

The number of individuals potentially impacted by this security event is also not disclosed in the available public filing. This means that while Cerner Corporation has reported an incident involving personal information, the scale and specific data types involved remain broadly defined in official notifications.

Given the unspecified nature of the compromised data, individuals who may be affected by this Cerner Corporation incident should exercise general data security best practices. It is advisable to remain attentive to any unusual communications, monitor financial statements, and review credit reports for suspicious activity. Consider enabling multi-factor authentication on all online accounts as a general security measure.

These details are drawn from official public filings with regulatory bodies, reflecting the information made available at the time of reporting. The investigation into the incident is ongoing, and further details may emerge as it progresses.

Questions about this case file

Where does the Cerner Corporation case file come from?: Every entry is taken from the breach report Cerner Corporation lodged with the Oregon Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?: Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?: It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?: Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Oregon data breaches

Filing source: Oregon Attorney General

Named in the Cerner Corporation breach?

Attach your notice and a short note. An attorney checks it against this case file at no cost.

Timeline

Case facts

Case notes

Questions about this case file

More Oregon case files