Actor claims to sell 3 million Aakash Healthcare patient records
A threat actor on a dark web forum is selling for $10,000 a database they claim was stolen from Aakash Healthcare, a multi-specialty hospital in New Delhi, with about 3 million patient records. The sample allegedly includes patient IDs, personal data, addresses, contacts and medical reports. The claim is unverified, the hospital has not confirmed an incident, and patients should be cautious with unexpected contacts about treatment or bills.
What happened
A criminal actor is advertising on a dark web forum a database they claim was stolen from Aakash Healthcare, a multi-specialty hospital in New Delhi. The asking price is $10,000 and the actor says it holds about 3 million patient records. The hospital has not confirmed an incident and the claim is unverified.
Why it matters
If confirmed, the breach would expose clinical and personal data of about 3 million patients, with risk of medical fraud, extortion and targeted phishing. Hospital data references real treatment, which makes scams more convincing. The claim alone already exposes the hospital to reputational damage and regulatory scrutiny.
What to do
Monitor dark web forums and leaked-data services for signs of this database, trigger the incident response plan to investigate anomalous access, and prepare patient communication. Reinforce warnings about unexpected calls or messages citing treatment or bills.
For the technical team
- Affected
- Banco de dados de pacientes do Aakash Healthcare (hospital multiespecialidade em Nova Délhi, Índia), com cerca de 3 milh · Aakash Healthcare, a multi-specialty hospital in New Delhi, India: patient database with about 3 million records, per the actor's claim.
- Exploitation
- Sale advertised on a dark web forum for $10,000, reported by DailyDarkWeb on X. Unverified claim: dataset size and origin have not been verified and the hospital has not publicly confirmed an incident.
- Fix
- Not applicable: no vulnerability or patch reported; response is investigation and monitoring.
- More details
- The actor's sample allegedly includes patient IDs and registration numbers, names, gender, dates of birth, addresses, contact details and medical reports. DailyDarkWeb notes that hospital patient data is often used for medical fraud, extortion and convincing phishing. Incident opened on 2026-10-27.
Timeline
Incident opened.
Sources 1 source
- @DailyDarkWeb @DailyDarkWeb
