Medley: unauthorized access to the @link clinic system

Attackers accessed @link, Medley's system for clinics such as obstetrics and gynecology, along with its patient app. An outside specialist alerted Medley on 11 October, and Medley confirmed the access. It stopped the services late on 14 October, so web booking and digital patient cards stopped working. Patient data may have leaked; up to 787 medical institutions could be affected. Its October 22 update at 10:00 said the planned phased restart of some clinic functions from 07:00 was delayed by a fault and had no revised start estimate. On October 23 Medley said it had confirmed that, from late September to mid-October, a third party used a planted program to take data from its database. For users of the app and web booking, names, name readings, birth month and day, email addresses, login IDs and passwords, clinic names, registration and last visit dates, and card payment dates and amounts leaked. Other patients' names, birth month and day, clinic names, login IDs and initial passwords were affected too. The number of people is still being counted.