Japanese Hospital Confirms Data Leak Affecting 130,000 Patients and 1,700 Staff
Summary
A Japanese hospital confirmed personal information was leaked after a January cyberattack. The hospital said attackers used VPN equipment to access its medical system and steal a database; Kyodo reported a ¥15 billion ransom demand.
Key points
- Nippon Medical School Musashi Kosugi Hospital said personal information for about 130,000 patients and 1,700 staff and clinical trainees was leaked.
- The hospital said the attack occurred in late January and targeted its medical information system.
- Attackers reportedly used VPN equipment to gain access, then stole a database from a nurse-call server via ward terminals.
- The leaked information included names, addresses, phone numbers, and dates of birth.
- The data was subsequently posted on a website, according to the report.
- Kyodo reported that the attackers demanded about ¥15 billion (approximately US$96 million).
Article Details
- Victim Organization
- 日本醫科大學武蔵小杉醫院
- Incident Type
- Cyberattack involving unauthorized access to the hospital's medical information system through a VPN device and theft of a database from a nurse-call server via ward terminals.
- Disclosure Date
- 2026-02-27
- Data Types Exposed
- Names
- Addresses
- Telephone numbers
- Dates of birth
- Affected Records
- Approximately 130,000 patients and approximately 1,700 staff members and clinical medical students.
- Ransom Or Extortion
- Kyodo News reported that the attackers demanded approximately JPY 15 billion (about USD 96 million). No payment was reported.
- Claim Status
- confirmed