This transcription is provided by artificial intelligence. We believe in technology but understand that even the smartest robots can sometimes get speech recognition wrong.

Hey everyone. I'm Drex and this is the two minute drill where I cover three hot security stories twice a week. All part of the cyber and risk community here at the 2 29 Project and this week. Health, I try to keep the podcast mostly plain English and mostly non-technical, so it's easy for everyone in the organization to consume so that everyone can do their part.

To keep patients, families, and the whole healthcare system safe. Today's episode is brought to you by Google. Healthcare Systems are lowering cost and boosting endpoint security with Google Chrome os. Paired with Google Chrome Enterprise. A secure browser that's trusted by billions of users. So now there's a better way for healthcare teams to work safely on the web.

Learn more or schedule some time with the Google Healthcare team. At this week, health.com/chromeos. Great to see everyone today. Here's some stuff you might wanna know about. There's actually two separate Oracle security stories today. Same company, just two different incidents being reported. The first story I relayed last week on the two minute drill, a hacking group called Rose 87, 1 68, claims to have gained access to the Oracle Cloud, stealing login and other information.

6 million user records. And by the way, Oracle denies this incident. But independent security researchers have looked at the stolen data. They say it's legit. The data is now for sale on the dark web. There's stories about this including a really well-written post by Kevin Beaumont in Medium, and you can find all of that on the news site.

The second Oracle security incident was just recently reported. Hackers gained access sometime after January 22nd, apparently reaching into patient data, then attempting to extort several healthcare organizations in the us. This breach occurred on older Cerner servers that had not yet been shifted to Oracle Cloud.

The stolen data may have included patient medical information, and Oracle is apparently working with the organizations affected to attempt to identify the impacted patients. We don't know yet how many organizations were affected, and we don't know yet how many patients. May have been affected by this incident.

I'll add, after reading the reports and the stories and talking to several Oracle Cerner customers over the past few days, the lack of transparency and the amazing level of legal wordsmithing that's being relayed to me, uh, for everyone involved, they're not happy. It's not reflecting well on the team at Oracle.

There's several stories detailing both of those events. And if you wanna stay up to date on all the latest healthcare, innovation, tech and security news, take a look at the industry's fastest growing news site this week. health.com/news. Today's episode was brought to you by Google. You can keep patient data safe and reduce the burden of IT operations staff.

And create a better clinician experience all with one platform. Google Chrome OSwith Chrome Enterprise. Find out how by scheduling a chat today. Go to this week, health.com/chromeos. That's it for today's two minute drill. Thanks for being here. Stay a little paranoid and I'll see you around campus.