Feb 27 • 12:00 UTC 🇯🇵 Japan Asahi Shimbun (JP)

Leak of patient information expands to 130,000 due to cyberattack on Nippon Medical University Musashikosugi Hospital

A cyberattack on Nippon Medical University Musashikosugi Hospital has resulted in the leakage of personal information affecting up to 130,000 individuals.

Nippon Medical University Musashikosugi Hospital in Kawasaki City has reported that a ransomware attack led to the leak of personal information, which has now expanded from an initial estimate of 10,000 patients to approximately 130,000 individuals. This includes not only patients but also about 1,700 hospital staff and clinical trainees since 2021. The hospital confirmed that the information stolen, which came from the same nurse call system server, includes patient IDs, names, genders, addresses, and dates of birth, though medical records or credit card information have not been compromised. The attack was explained to have started on January 26, when hackers infiltrated the hospital's network through a VPN device, and by January 29, personal information was stolen from the nurse call server accessed via ward terminals. The hospital announced the confirmation of the additional leak on February 18, when the information of roughly 120,000 individuals was newly identified as compromised. In response to this incident, the hospital has strengthened its overall system security measures, which were completed on the morning of February 23, leading to limited emergency patient admissions from the morning of February 22 to the morning of February 24. The nurse call system has since been restored to normal operations.

📡 Similar Coverage