A threat actor claims to have breached sim.rs, a hospital management information system operating in Indonesia. The actor has posted a database for sale containing what is alleged to be the records of 159,186 patients.
“sim.rs” is a common abbreviation in Indonesia for Sistem Informasi Manajemen Rumah Sakit, which translates to Hospital Management Information System.
According to the actor, the compromised data includes a wide range of sensitive patient and medical information. The leak contains numerous columns of data, including:
- Full names
- National Identification Numbers (NIK)
- Phone numbers
- Home addresses
- Dates of birth
- Gender
- Medical record numbers
- Insurance card numbers
- Examination dates and diagnoses
