Siriraj Hospital in Thailand fell victim to a data security breach recently.
The threat actors offered a database for sale on the internet that contained the personal information of 39 million purported patients.
The leaked data even included the names, addresses, Thai IDs, phone numbers, gender details, dates of birth, and other information of many VIP patients.
Source: https://www.bangkokpost.com/thailand/general/2245063/huge-patient-data-leak-from-siriraj-hospital
TPRM report: https://scoringcyber.rankiteo.com/company/siriraj-hospital-mahidol-university-bangkok-thailand
"id": "sir223419422",
"linkid": "siriraj-hospital-mahidol-university-bangkok-thailand",
"type": "Breach",
"date": "01/2022",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'customers_affected': 39000000,
'industry': 'Healthcare',
'location': 'Thailand',
'name': 'Siriraj Hospital',
'type': 'Hospital'}],
'data_breach': {'data_exfiltration': True,
'number_of_records_exposed': 39000000,
'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personal Information']},
'description': 'Siriraj Hospital in Thailand fell victim to a data security '
'breach recently. The threat actors offered a database for '
'sale on the internet that contained the personal information '
'of 39 million purported patients. The leaked data even '
'included the names, addresses, Thai IDs, phone numbers, '
'gender details, dates of birth, and other information of many '
'VIP patients.',
'impact': {'data_compromised': ['Names',
'Addresses',
'Thai IDs',
'Phone Numbers',
'Gender Details',
'Dates of Birth']},
'initial_access_broker': {'data_sold_on_dark_web': True},
'motivation': 'Financial Gain',
'title': 'Data Breach at Siriraj Hospital',
'type': 'Data Breach'}