Oracle Health reportedly suffered a breach that affected nearly 20 million patients across as many as 80 U.S. hospitals, according to Bloomberg estimates. According to NS3.AI, Oracle Health confirmed unauthorized access to two legacy Cerner servers that had not yet been migrated to Oracle Cloud.

The stolen data reportedly includes names, Social Security numbers and medical information. A hacker allegedly demanded ransom to stop the files from being published. Oracle Health said its current systems and Oracle Cloud infrastructure were not affected.