Hospital Hard Drives Sold Online Exposed 510,000 Patient Records
Two Japanese hospitals' old hard drives were sold on auction sites with patient data still on them. Proper data disposal matters even with old equipment.
Source
DataBreaches.net
Original headline: JP: Hokkaido hospitals data leak may hit 510k, HDDs sold online blamed
Plain-English summary by GetCyberRight. Read the full report at the source above.
Hard drives from two hospitals in Hokkaido, Japan, were listed for sale on auction websites with sensitive information still stored on them. Japan's National Hospital Organization confirmed that personal information from at least 180,000 patients and employees was leaked. The organization warns the total number of affected people could reach 510,
- The Hokkaido Medical Center was one of the facilities involved, with the hard drives appearing online last June. If you are not a patient or employee at these specific hospitals in Japan, your information was not exposed in this incident. However, this case highlights a widespread problem. When medical facilities, schools, businesses, or other organizations dispose of old computers and storage devices, sensitive information can remain on those devices if not properly erased. If you have been a patient at any hospital, you cannot prevent them from mishandling your data after they collect it. However, you can take these protective steps.
- Monitor your medical records regularly for any unauthorized access or changes. Ask your healthcare providers how to review your records online.
- Watch for suspicious emails or phone calls from people claiming to be from medical offices, especially if they ask for additional personal information.
- If you receive notice that your medical data was exposed, follow the specific instructions provided by the healthcare organization. When you dispose of your own old computers, phones, or external hard drives, you face the same risk. Before selling, donating, or throwing away any device, properly erase all data using specialized software or physically destroy the storage drive. Simply deleting files or formatting a drive is not enough. The same information that hospitals must protect about you, you must protect about yourself when handling old electronics.
Curated from trusted cybersecurity sources by GetCyberRight
Source: DataBreaches.netStay ahead of cyber threats
Get our free weekly digest. Real threats, plain language, what to do about them. No spam, ever.
More articles

French Government Messaging Service Hacked: Lessons for Your Family
Hackers broke into France's secure government messaging platform. The breach shows that even organizations with strong security can be compromised through stolen accounts.
2 min read
French govt messaging service breached in account hijacking attack
DINUM, the digital affairs directorate of the French government, warned that hackers used a hijacked user account to breach Tchap, the French government's encrypted messaging platform. [...]
1 min read
CISA gives feds 3 days to patch Check Point VPN bug exploited as zero-day
CISA has ordered U.S. government agencies to secure their Check Point Remote Access VPN and Mobile Access deployments against a critical vulnerability exploited in zero-day attacks by Qilin ransomware
1 min read
Government Security Bug: Do Regular Families Need to Worry?
A security flaw in business VPN software is being fixed at government agencies. Home internet users are not affected by this specific issue.
2 min read