TBF, in this case the hack was on legacy Cerner infrastructure that Oracle acquired ~5 years ago.

From TFA:

attackers had targeted older Cerner servers before the data stored on them could be migrated to Oracle’s cloud storage service