Actor Claims to Have Copied Ampath Laboratories Databases, Including 80M+ Admission Records
Summary
An actor claims to have copied 10 Ampath Laboratories databases containing patient, employee, financial and system data, including 80M+ admission records. The claim and data have not been independently verified.
Key points
- The actor, using the handle “ByteToBreach,” claims to have copied 10 databases from an environment said to contain about 375.
- The claimed data includes patient and employee records, financial information, system configurations, and source code and DLLs.
- The actor claims the admissions table contains more than 80 million records spanning the mid-2000s to the present.
- Potentially exposed fields reportedly include dates of birth, contact and physical addresses, medication information, and South African ID numbers.
- The article says the authenticity, source, completeness, database counts, and record volumes have not been independently verified.
- If authentic, the combination of sensitive personal and internal data could increase risks of identity fraud, targeted phishing, extortion, and further compromise.
Article Details
- Victim Organization
- Ampath Laboratories
- Incident Type
- Alleged copying of databases and data exposure
- Disclosure Date
- 2026-10-14
- Data Types Exposed
- Patient information, including admission dates, dates of birth, contact details, physical addresses, guarantor information, medication information, and South African ID numbers
- HR and employee data
- Financial information
- System-configuration data
- Source code, DLLs, and correspondence with the organization's information-security team
- Affected Records
- The actor claims the admissions table contains more than 80 million records; this figure has not been independently verified.
- Operational Impact
- No operational disruption is reported. The authenticity, source, completeness, and availability of the purported data have not been independently verified.
- Ransom Or Extortion
- No ransom demand or extortion activity is reported.
- Claim Status
- claimed