A newly reported scale for the Cerner breach, with evidence limits and practical guidance for affected people. A Texas regulator record BR-0005382, dated 2 October 2026, reports 19,929,149 affected people, including 2,992,244 Texans, in Cerner Corporation's 2025 legacy-system breach. That does not show a new October 2026 intrusion. What the evidence shows The Texas table lists address, Social Security number information and medical information. The larger total appears in the public response, not as a visible table column. Texas warns that record details can change, so this remains a reported figure tied to the 8 October retrieval, not an independently audited global count. Regulator-reported dates are not independently confirmed access times. The California notice adds context, not scale A California Attorney General Cerner record links a redacted provider sample dated 25 July 2025. It says an unauthorised party obtained data held by an electronic health record vendor and accessed personal health information on legacy Cerner systems; the provider's systems were not affected. The sample says information for a recipient may have included a name, Social Security number and medical-record information. That wording is provider- and recipient-specific. It does not establish one uniform field set for everyone in the reported population. The sample enrolment deadline was 31 January 2026. It is expired and cannot be presented as a current generic offer. Readers should use the terms and contact route in the notice addressed to them. Population and data type are different questions BlackTree analysis: population, incident categories and recipient-specific fields are…