Threat Actor Claims Patient Data Breach at Serbian Gynecology Clinic

Summary
An unnamed threat actor allegedly posted Deminima clinic patient records publicly after an extortion attempt. The records reportedly included contact details, JMBG numbers, dates of birth, and sensitive medical diagnoses; the claims are unverified.
Key points
- An unnamed threat actor allegedly published patient records from Deminima, a Serbian gynecology clinic.
- The actor claims the clinic was contacted about extortion before the records were posted and did not respond.
- Reportedly exposed information includes names, phone numbers, JMBG numbers, addresses, email addresses, and dates of birth.
- The records reportedly include medical diagnoses, including sexually transmitted diseases and infections.
- The article provides no independent confirmation of the breach or the actor’s claims.
Article Details
- Victim Organization
- Deminima
- Incident Type
- Alleged patient data breach and public disclosure of records
- Data Types Exposed
- Full names
- Phone numbers
- JMBG numbers
- Residential addresses
- Email addresses
- Dates of birth
- Medical diagnoses, including STDs and infections
- Operational Impact
- No operational impact reported.
- Ransom Or Extortion
- An unnamed threat actor claimed the clinic was contacted about extortion before the records were published and alleged management ignored the perpetrators. The article does not confirm an extortion demand or payment.
- Claim Status
- claimed
