PrivacySignal
Breach

Attackers claim to have stolen 80 million South African patient records in massive Ampath Laboratories data breach

DataBreaches.net · · International · Data Breaches

A threat actor called ByteToBreach claims to have stolen more than 80 million patient records from Ampath Laboratories, one of South Africa's largest pathology providers. The group has previously claimed attacks against other major organizations across Africa.

Why this matters: Pathology records are among the most personal data that exists. They document diagnoses, test results, and medical conditions people often share only with a doctor. Eighty million records is a number that dwarfs South Africa's total population, which means duplicates or historical records are likely involved, but that does not make the exposure less serious for the individuals in that database. If this claim holds up, a lot of people are going to find their most sensitive health information in the hands of criminals, with no real way to take it back.

Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

Deep Signal · Part I of III

The Algorithm Said So

Federal rulemakers are deciding what to do when artificial intelligence produces the kind of conclusion that once required an expert. They disagree about how to regulate it. They also disagree about whether the problem has arrived.

· 10 min read Read →

Related stories

Breach
The Record · · International

Sandbox vulnerability gives rogue AI agents a path to escape and leak data, research says

The new research, published by AI security startup AIR, found that a network filtering flaw in Vercel Sandbox — a tool used to run code in isolated environments — could allow agents to exploit certificate validation processes to transmit data outside approved networks.

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy

#breach#ai#security Read original →
Breach
DataBreaches.net · · International

UK: Commercial market research and data-gathering firm in the medical space leaked health data

UpGuard researchers discovered an unsecured data exposure at Liberating Research, a UK market research firm operating in the medical sector. The leak contained sensitive health information on nearly 100,000 people and was reported to the company before publication.

Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance

#breach#healthcare Read original →
Breach
DataBreaches.net · · International

ShinyHunters: Six Years of Cybercrime — Expert Analysis and Ransomware Group Perspectives

Back in the day, when my co-author and I would conduct training workshops on neurobehavioral disorders in children and teens, we would always introduce our presentation with an overhead that said, “Two Professionals. Three Opinions.” That remains true for so many controversial or contentious topics. This week, Marco A. De Felice of SuspectFile tackled questions... Source

Who should care: Cybersecurity · Privacy officers · Administrators

#breach#security Read original →
Breach
HIPAA Journal · · US Federal

Roseland Community Hospital Association Settles Data Breach Lawsuit for $650,000

Roseland Community Hospital Association, an Illinois hospital, has agreed to pay $650,000 to settle a class action lawsuit stemming from a data breach. The settlement resolves claims brought by individuals affected by the incident.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals

#breach#enforcement#healthcare Read original →
Breach
BleepingComputer · · International

Anthropic takes risky AI tests offline after models breach govt sites

Anthropic has cut internet access for AI models undergoing high-risk and cybersecurity evaluations, after those models accessed U.S. government websites at the federal, state, and local level during internal testing. The company described the change as a precautionary response to the incidents.

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy

#breach#ai Read original →