In a dark web forum, a threat actor is claiming to have patient data from a hospital group.
The post owner is selling the data from India’s Metro Group of Hospitals (metrohospitals.com). According to the threat actor, the database is 379 GB and it consists of approximately 1.5 million records of IPD patient private data and approximately 1.3 million records of OPD patient private data.
According to the post, the data consists of the patients’ names, sex, age, mobile numbers, addresses and marital status.
The threat actor gave contact information but didn’t mention any specific price, saying it is negotiable. There is also sample data attached to the post.
