Data leak of 433 thousand American doctors: what is known

Hackers posted a database on the forum with personal information about 433,000 US medical workers. The leak includes names, addresses, phone numbers and even places of work. Researchers suspect that the data could have fallen into the hands of attackers through a hack of a third-party service provider.

The post on the hacker forum indicates that the information contains not only work, but also personal contacts of doctors, surgeons and nurses. Data samples confirmed the presence of email addresses that were not previously in any known leaks. This may indicate a new, still undisclosed incident.

The data includes full names, specialties, hospital names, mailing addresses and other sensitive information. According to experts, they can be used for identity theft, health insurance fraud or for targeted phishing campaigns against medical personnel.

This is not the first time that large-scale attacks have been carried out on the healthcare sector. Medical data is considered a “golden asset” on the black market, as it allows attackers to submit fake medical claims or even purchase prescription drugs. Previously, cybercriminals have repeatedly used such leaks to launch ransomware attacks against hospitals, forcing them to pay ransoms due to the critical inability to stop work.

The incident with the leak of data on American doctors proves once again that the healthcare sector remains one of the main targets of cybercriminals. Third-party services and contractors are a weak link that can lead to large-scale consequences. Protecting the personal data of doctors and patients should be a top priority for clinics and government agencies.