CMIC HealthCare Institute: unauthorized access to the system of the patient support program "RA Connect" it runs under contract leaked information of 1,940 patients, medical professionals and client staff

Files in the web-public area of a patient support program that CMIC HealthCare Institute runs under contract were taken in an unauthorized access; 1,940 people were affected.

Disclosed

2026-07-24

Organizations involved

Leaked or at risk

1.9K

1,940

Downtime

Unknown

What happened

2026-06-15
A third party gained unauthorized access to the system used to run the patient support program "RA Connect". [1] [2]
2026-07-11
An investigation confirmed that part of the personal information in files in the web-public area had been taken by a third party. It cut access and changed credentials. [1] [2]
2026-07-24
It announced the findings: 30 patients (names, age, sex, phone numbers, prefecture, regular medical institution), 216 patients with email addresses only, 1,535 medical professionals and 159 client company staff. No misuse has been found. [1] [2]

[Breached][Major]Tokyo, MinatoScientific research, professional and technical services1,940 leaked
CMIC HealthCare Institute Co., Ltd.
Information of patients, medical professionals and client company staff was taken from files in the web-public area of the system running a patient support program for a rheumatoid arthritis drug.

						Note
CMIC HealthCare Institute Co., Ltd.	[Breached]	[Major]	Tokyo, Minato	Scientific research, professional and technical services	1,940	Information of patients, medical professionals and client company staff was taken from files in the web-public area of the system running a patient support program for a rheumatoid arthritis drug.