Actor claims sale of 2.2 million HT Médica patient records
Threat actor SpartanX is selling on a forum a database they claim holds 2.2 million patient records from HT Médica (Health Time), a Spanish diagnostic imaging provider. The data allegedly includes names, birth dates, DNI numbers, emails, phone numbers and home addresses. HT Médica has not confirmed an incident; if confirmed, the case would fall under GDPR breach notification rules.
What happened
An actor named SpartanX is offering for sale on a forum a database they claim holds 2.2 million patient records from HT Médica, a Spanish diagnostic imaging provider. The data would include names, Spanish national ID (DNI) numbers, contacts and addresses. The company has not confirmed an incident.
Why it matters
If confirmed, patients would be exposed to identity theft and to phishing that impersonates the clinic or health insurers. The case falls under GDPR breach notification rules, with risk of fines and reputational damage.
What to do
Await confirmation from HT Médica and monitor official channels. If the company is a client or partner, contact their security team to verify the incident. Warn staff and patients about emails impersonating the clinic.
For the technical team
- Affected
- HT Médica (Health Time), provedora espanhola de diagnóstico por imagem; base alegada de 2,2 milhões de registros de paci · HT Médica (Health Time), Spanish diagnostic imaging provider; alleged database of 2.2 million patient records.
- Exploitation
- Unverified claim by actor SpartanX, reported by DailyDarkWeb. HT Médica has not confirmed an incident. No evidence of confirmed access or exploitation.
- Fix
- No fix applicable; data breach incident.
- Vector
- Claimed data breach offered for sale on a forum. Sources do not describe how access would have occurred.
- More details
- Alleged data: first and last names, sex, birth dates, DNI numbers, email addresses, personal and work phone numbers, home addresses, postal codes and cities. DailyDarkWeb analyst note: national ID numbers tied to patient contact details create a serious risk of identity theft and phishing impersonating the clinic or health insurers; if confirmed, the incident would fall under GDPR breach notification rules.
Timeline
First report: actor offers alleged HT Médica patient database on a forum.
Sources 1 source
- @DailyDarkWeb @DailyDarkWeb
