The centralized servers of the Indonesian Health Ministry were attacked by hackers to obtain the medical information of Indonesian hospital patients.
Around 720 GB of the data including the personal information of patients of various hospitals was sold on the dark web.
The data included the hospital's details, patients’ photos, x-ray scans, and Covid-19 test results.
The Health ministry immediately took the action and coordinated with National Cyber and Encryption Agency to look into the matter.
Source: https://en.tempo.co/read/1547439/health-ministry-responds-to-massive-data-leak-of-medical-records
TPRM report: https://scoringcyber.rankiteo.com/company/ministry-of-health-republic-of-indonesia
"id": "min193119422",
"linkid": "ministry-of-health-republic-of-indonesia",
"type": "Breach",
"date": "01/2022",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Healthcare',
'location': 'Indonesia',
'name': 'Indonesian Health Ministry',
'type': 'Government Agency'}],
'data_breach': {'data_exfiltration': 'Yes',
'file_types_exposed': ['Photos',
'X-ray scans',
'Covid-19 test results'],
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Medical information',
'Personal information']},
'description': 'The centralized servers of the Indonesian Health Ministry '
'were attacked by hackers to obtain the medical information of '
'Indonesian hospital patients. Around 720 GB of the data '
'including the personal information of patients of various '
'hospitals was sold on the dark web. The data included the '
"hospital's details, patients’ photos, x-ray scans, and "
'Covid-19 test results. The Health ministry immediately took '
'the action and coordinated with National Cyber and Encryption '
'Agency to look into the matter.',
'impact': {'data_compromised': ['Hospital details',
'Patients’ photos',
'X-ray scans',
'Covid-19 test results']},
'initial_access_broker': {'data_sold_on_dark_web': 'Yes'},
'motivation': 'Data Theft',
'response': {'third_party_assistance': ['National Cyber and Encryption '
'Agency']},
'title': 'Data Breach at Indonesian Health Ministry',
'type': 'Data Breach'}