1 active alert Show

Notice of Oracle Health/Cerner Security Incident

At ChristianaCare, we take patient privacy and the protection of patient data very seriously. ChristianaCare is one of a number of healthcare organizations nationwide whose data is involved in recent cybersecurity incident that occurred at Oracle Health (formerly Cerner Corporation). ChristianaCare’s IT systems were not impacted, and there was no disruption to ChristianaCare’s clinical operations.

Oracle Health, formerly Cerner Corporation, is a third-party electronic health records (EHR) vendor used by many healthcare providers, including ChristianaCare. In April, Oracle Health informed us that an unauthorized third party gained access to legacy Cerner systems as early as January 22, 2025, and obtained certain data.

Upon learning of the incident, Oracle Health began an investigation, engaged external cybersecurity specialists, and engaged with federal law enforcement, who requested the delay of patient notifications while they conducted their investigation.

On September 29, 2025, Oracle Health provided ChristianaCare with a list of ChristianaCare patients whose information may have been involved in the incident. The information varied by patient but may include names, Social Security numbers and information included within patient medical records, such as medical record numbers, doctors, diagnoses, medicines, test results, images, care and treatment.

Letters are being mailed to patients whose information was involved in this incident, including an offer of a complimentary two-year membership to credit monitoring and/or minor identity protection services.

Patients are encouraged to review statements they receive from their health care providers and health insurer and immediately report any inaccuracies to the provider or insurer. Individuals who have questions about this cybersecurity incident may contact 833-745-1528 toll free, Monday through Friday from 9am – 9pm Eastern Time (excluding major U.S. holidays) and provide engagement number B155349.

We regret any concern that Oracle Health’s incident may cause our patients, and we continue to review and assess the cybersecurity protections of our third-party vendors.

For Patients

Your Patient Privacy

Website Privacy Statement

Your Privacy Matters To Us

ChristianaCare is committed to providing you with quality healthcare information. The ChristianaCare Privacy Office has created these resources to demonstrate our commitment to your privacy in accordance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA).

Notice of Privacy Practices

This Notice of Privacy Practices (NPP) is about your information, your rights, and our responsibilities. It describes how your information may be used and disclosed by ChristianaCare, and how you can get access to it. Use the links below to view or print the NPP available in multiple languages.

Please click the Notice of Privacy Practices tab below to access the NPP in other languages.

Health Information Exchanges (HIEs)

ChristianaCare participates in Health Information Exchanges (HIEs) to deliver safer, more effective care. HIEs allow health care providers and patients to safely access health information electronically. View these Frequently Asked Questions & Answers for more information about the HIE programs in which ChristianaCare participates.

Patient Portal

View this webpage for more information about the ChristianaCare Patient Portal, including help for navigating your Portal. The Portal team can assist with requests such as updating contact information and emergency contact listed in your Portal.

Privacy Office Help

Call ChristianaCare’s Privacy and Compliance Hotline at 302-623-4468 to report a privacy concern or ask a question about completing Privacy forms, including requesting an amendment of medical records.

Notice of Privacy Practices
Privacy Forms
Privacy Policies

A Master Policy on Privacy
Acceptable Use Policy
Access by Individuals to their Designated Record Sets (DRS)
Access, Use and Disclosure of Psychotherapy Notes
Accounting for Disclosure of Protected Health Information (PHI)
Amendments-Corrections to Health Information
Authorization for Disclosure of Protected Health Information (PHI) to a Third Party
Business Associates & Contractors with Incidental Contact with Protected Health Information
Conditions for Treatment Form
Confidential Communications
Confidential Patient
Designated Record Set (DRS)
Disclosure of De-Identified PHI and Limited Data Sets
Disclosure for Law Enforcement Purposes
Disclosure of Protected Health Information (PHI)
Disposal of Confidential and Private Information
Management of Privacy Matters
Record Retention
Request by ChristianaCare for Protected Health Information from Other Organizations
Subpoenas, Court Orders, and Warrants
Privacy and Information Security Program
Photography/Recording/Filming of Patients, Visitors, and Staff

For the Love of Health Podcast

How do we use and protect patient data? Journey with us through the evolution of collecting patient data and examining how health systems use data to improve individual and community care, on the ChristianaCare podcast, For the Love of Health.

More Episodes

This content is hosted by a third party (YouTube). By showing the external content you accept YouTube's terms and conditions.

Show

Health Care Disclaimer

Our website and other online health information tools do not provide medical advice, and is for informational and educational purposes only, and is not a substitute for professional medical advice, treatment or diagnosis. Call your doctor to receive medical advice. If you think you may have a medical emergency, please dial your local emergency response phone number.

Login