Oracle Health, 8 Health Systems Must Face Data Breach Suit
A federal judge has cleared the way for a major data breach lawsuit against Oracle Health and eight health systems to move forward. According to Becker's Hospital Review, U.S. District Judge Beth Phillips of the Western District of Missouri ruled on June 22 that the consolidated case can proceed, denying most of the defendants' attempts to get it dismissed.
The judge allowed core claims, including negligence against all defendants, to advance. That matters because it keeps both the technology vendor and the hospitals that relied on it legally exposed, rather than shifting all blame to one party. Oracle Health, the former Cerner business Oracle acquired in 2022, has faced scrutiny over the security of legacy patient data systems.
The ruling signals that courts are increasingly willing to let breach plaintiffs past the early dismissal stage, a hurdle that has historically ended many cases. For health systems, it underscores that outsourcing IT does not outsource liability when patient data is compromised.
Sources