Data from over 485,000 participants in a cervical cancer screening program was stolen by threat actors after unauthorized access to the Clinical Diagnostics NMDL laboratory. The stolen information includes names, addresses, dates of birth, citizen service numbers (BSN), test results, healthcare provider names, and some email addresses and phone numbers. The breach occurred between July 3-6, but authorities were not informed until August 6. The lab has suspended services for an investigation, and victims are being notified due to potential fraud risks. Reports suggest additional personal and medical data from the past three years may also have been compromised, with up to 300GB stolen.
Source: https://www.infosecurity-magazine.com/news/hackers-raid-dutch-lab-steal-data/
TPRM report: https://www.rankiteo.com/company/eurofins-clinical-diagnostics
"id": "eur205081225",
"linkid": "eurofins-clinical-diagnostics",
"type": "Breach",
"date": "8/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '485,000',
'industry': 'Healthcare',
'location': 'Rijswijk, Netherlands',
'name': 'Clinical Diagnostics NMDL',
'type': 'Laboratory'}],
'customer_advisories': 'Victims are being notified by Dutch authorities',
'data_breach': {'data_exfiltration': '300GB',
'number_of_records_exposed': '485,000',
'personally_identifiable_information': ['names',
'addresses',
'dates of birth',
'citizen service '
'numbers (BSN)',
'email addresses',
'phone numbers'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['personal data',
'medical information']},
'date_detected': '2023-07-03',
'date_publicly_disclosed': '2023-08-06',
'description': 'Data from over 485,000 participants in a cervical cancer '
'screening program was stolen by threat actors after they '
'gained unauthorized access to a third-party laboratory.',
'impact': {'brand_reputation_impact': 'High',
'data_compromised': ['names',
'addresses',
'dates of birth',
'citizen service numbers (BSN)',
'test results',
'healthcare providers',
'email addresses',
'phone numbers'],
'identity_theft_risk': 'High',
'operational_impact': 'Services suspended temporarily'},
'investigation_status': 'Independent investigation ongoing',
'lessons_learned': 'The incident highlights how a single weak link can have a '
'big impact on a large number of victims.',
'ransomware': {'data_exfiltration': '300GB'},
'recommendations': 'Building a security posture based on clear visibility and '
'control.',
'references': [{'source': 'Dutch Population Screening Association (BDO)'}],
'response': {'communication_strategy': 'Victims are being notified by Dutch '
'authorities',
'recovery_measures': 'Services suspended temporarily',
'remediation_measures': 'Independent investigation of IT '
'security systems'},
'title': 'Data Breach at Clinical Diagnostics NMDL Laboratory',
'type': 'Data Breach'}