Seller claims MedixBD database of 1 million records for sale
A threat actor on a dark web forum claims to hold the MedixBD database, the telemedicine service of Opsonin Pharma in Bangladesh, asking $1,000 for the data and claimed direct server access. The listing mentions over 1,000,000 records of patients, doctors and vendors, with full names, phone numbers, addresses and photos. The claim is unverified, Opsonin Pharma has not commented, and platform users should change passwords and watch for contacts citing health data.
What happened
A seller on a dark web forum claims to hold the MedixBD database, the telemedicine platform of Opsonin Pharma, one of Bangladesh's largest drug makers, offering the material for $1,000. The listing mentions over 1,000,000 records of patients, doctors and vendors. The claim is unverified and the company has not commented.
Why it matters
If confirmed, exposed data includes full names, phone numbers, addresses and photos of patients, doctors and vendors, enabling phishing, identity theft and medical fraud against them. The seller also claims direct server access, which would mean an ongoing compromise and risk of further leaks.
What to do
Seek official confirmation from Opsonin Pharma about the case and monitor forums for developments in the sale. MedixBD users should change their password for the service and distrust calls and messages citing health data.
For the technical team
- Affected
- Opsonin Pharma MedixBD, plataforma de telemedicina operada pela Opsonin Pharma, um dos maiores fabricantes de medicamentos de Banglades · MedixBD, telemedicine service operated by Opsonin Pharma in Bangladesh. No specific product or version cited in the source.
- Exploitation
- No confirmed exploitation. This is a dark web forum sale claim reported by DailyDarkWeb; the reporter's own analysis classifies it as an unverified threat-actor claim, not confirmation of a breach.
- Fix
- No fix applicable: no vulnerability or patch was cited. Verifying the claim and any server containment rest with Opsonin Pharma.
- Vector
- Access method unknown. The seller claims to hold the platform database and direct server access to MedixBD; the source gives no technical detail on the flaw or exploitation condition.
- More details
- Asking price: $1,000 for the data and the access. Fields claimed in the listing: full names, phone numbers, physical addresses and photos of patients, doctors and vendors. Risks cited if genuine: phishing, identity theft and medical fraud; the claimed server access would suggest an ongoing compromise. Opsonin Pharma has not commented.
Timeline
First public claim: seller advertises the database on an underground forum.
Sources 1 source
- @DailyDarkWeb @DailyDarkWeb
