[Resolved][Severity: Major][Intrusion]

Fukuoka Tokushukai Hospital: unauthorized access left personal data of patients and others viewable from outside

It detected unauthorized access on April 4. Data of up to 48,983 patients and others was viewable from outside. A leak has not been confirmed.

Disclosed

2023-07-28

Organizations involved

Leaked or at risk

54K

54,007

Downtime

Unknown

What happened

2023-04-04
It detected unauthorized access and isolated the system. [1] [2]
2023-04-07
It consulted the police. By April 10 it had told the Ministry of Health, Labour and Welfare and the Personal Information Protection Commission. [1]
2023-06-30
The investigation, which ran from April 10, ended. The system was migrated. [1]
2023-07-28
It announced the case. [2]

Impact

Viewable from outside were data of up to 48,983 patients (name, address, birth date, medication, disease, test values and so on), 3,223 staff and external people (name, email address) and 1,801 students and trainees (name, address). A leak to outside has not been confirmed. [1] [2]

Timeline

Detected 2023-04-04
Disclosed 2023-07-28
115 days

Attack or cause

Method: [Intrusion]
Impact: [Data leak]
Entry point: Unknown

Data exposed or at risk

[Name][Postal address][Date of birth][Health data][E-mail address]

Organizations involved

[Breached][Major]Osaka, Osaka, Kita-kuMedical care and welfare54,007 leaked
Tokushukai Medical Corporation
The system of the Fukuoka Tokushukai Hospital it runs was affected.

						Note
Tokushukai Medical Corporation	[Breached]	[Major]	Osaka, Osaka, Kita-ku	Medical care and welfare	54,007	The system of the Fukuoka Tokushukai Hospital it runs was affected.

Open in organization search

Sources

[1][News]不正アクセスで個人情報約5万5,000件が外部閲覧可能に、福岡徳洲会病院Cyber Security.com · 2023-08-08
[2][News]福岡徳洲会病院に不正アクセス、個人情報が外部から閲覧可能な状態にScanNetSecurity · 2023-08-26 08:05