Local hospital alerts patients to third-party data breach
JUPITER, Fla. — A data breach affecting a technology company has prompted Jupiter Medical Center (JMC) to issue a notice to patients.
The breach affected Cerner Corporation (Oracle Health), a company that provides health records to hospitals, clinics, and other health care organizations.
WATCH BELOW: Data breach affects Jupiter Medical Center
Jupiter Medical Center patients’ personal data may have been exposed in Oracle Health data breach
JMC issued a statement saying that the Cerner Corporation data security incident did not involve JMC’s information systems.
However, out of an abundance of caution, officials at the hospital said they alerted individuals who were potentially affected, along with steps to take to protect their personal information.
“Cerner Corporation has determined through an investigation that, at least as early as January 22, 2025, an unauthorized third party gained access to personal health information on legacy Cerner Corporation systems. Cerner Corporation informed us that law enforcement investigators directed a delay in notifying patients, as well as its hospital customers, about this incident because it could have impeded their investigation,” according to a statement posted to Jupiter Medical Center’s website.
The hospital said that following an investigation, which was concluded on or about Nov. 30, 2025, the information involved in the Cerner Corporation data security incident may have included protected health information about a limited number of JMC patients.
JMC officials determined that the personal data affected included names, Social Security numbers, medical record numbers, doctors, diagnoses, medicines, test results, images, care and treatment.
Cerner Corporation is offering identity protection, credit monitoring and internet surveillance services at no cost to anyone affected by the breach.
Cybersecurity expert Alan Crowetz emphasized the importance of taking advantage of these protective measures.
“Those are options that cost money, that will cost the person who’s been in their database no money,” Crowetz said. “And of course, I can’t emphasize it enough, check your credit card statements, be very careful about anybody calling you. Cybersecurity awareness is a part of life these days.”
JMC said they have made efforts to contact individuals potentially impacted by the breach. However, if you believe you were impacted but did not receive a letter, you are urged to contact 833-931-5355.
Click here to learn more about the breach and how to order a free credit report.
Widespread impact across health care systems
WPTV investigative reporter Dave Bohman spent Wednesday pressing for answers about how the breach happened and connecting patients with free resources to protect themselves.
Jupiter Medical Center confirmed the breach affects what it calls “a limited number of patients,” though the hospital has not disclosed exactly how many people are impacted.
A company executive told us that the hospital’s own computer system remains secure. The breach originated from Oracle Health’s Cerner systems, which provide electronic health records to manage patient information across multiple health care facilities.
We found that at least 13 other hospitals and health care systems have been victimized by this same security breach from January 2025, including Baptist Health, which notified its patients in July.
Jupiter Medical Center’s letter to patients claimed the hospital was not made aware until late November that the security breach potentially affected some of its patients.
The letter said Oracle Health asked to delay patient notifications because it could impede a criminal investigation.
Oracle is reportedly facing a possible class-action lawsuit over the data breach. WPTV reached out to Oracle for comment, but the company has not responded.
Jupiter Medical Center sent WPTV this statement about the security breach:
“We received notification from Cerner, our former electronic health record vendor, regarding a cybersecurity incident involving historical data stored on Cerner servers. This incident affected several other health system clients as well.
It is important to note that Jupiter Medical Center computers were not impacted by this incident. The privacy and security of our patients’ health information are among our highest priorities. We view any compromise of patient data with the utmost seriousness and take every possible measure to protect our community and prevent future incidents. We remain committed to providing the highest quality, safety, and patient experience for all we serve.”
link
