Actor claims leak of 99,201 Swiss MedReg records
Actor 92cityuhq advertised a 98 MB archive with 99,201 records from MedReg, Switzerland's national register of medical professionals, on an underground forum. Published samples include names, birth years, genders, nationalities, qualifications, medical specialties, licensing and practice authorization details. The source does not know whether the data came from a security breach or from publicly accessible registry records; the full dataset was offered for download.
What happened
Actor 92cityuhq advertised a leak of 99,201 records from MedReg, Switzerland's national register of medical professionals, on an underground forum. The 98 MB archive reportedly contains names, birth years, genders, nationalities, qualifications, specialties, licensing and practice authorization details. Sample records have been published and the full dataset was offered for download.
Why it matters
Personal and professional data of medical professionals in Switzerland is being offered on a criminal forum. It is still unknown whether there was a security breach or the data came from publicly accessible records, which prevents measuring the failure. There is no product to patch; the immediate risk is exposure of the information.
What to do
No fix to apply. Check whether records of physicians in your network appear in the published samples and follow any statement from the MedReg operator on the origin of the data.
For the technical team
- Affected
- MedReg, registro nacional suíço de profissionais de medicina · MedReg, Switzerland's national register of medical professionals. No specific software or version cited.
- Exploitation
- No technical exploitation reported. Actor 92cityuhq published samples and offered the full dataset of 99,201 records (98 MB archive) for download on an underground forum, according to @DarkWebInformer on 2026-10-27.
- Fix
- No fix or patch applicable; no software vulnerability identified in the sources.
- Vector
- Unknown. According to @DarkWebInformer, it is unclear whether the data came from a security breach or from collecting publicly accessible registry records. No technical vulnerability identified in the sources.
- More details
- Fields announced in the dataset: names, birth years, genders, nationalities, professional qualifications, medical specialties, licensing information and practice authorization details. Disclosure tracked by @DarkWebInformer. The source does not confirm the origin of the data.
Timeline
Actor published samples and advertised the full MedReg dataset on an underground forum.
Sources 1 source
- @DarkWebInformer @DarkWebInformer
