A recent post on a well-known data leak forum claims to expose sensitive information on 433,000 medical professionals in the United States. The leaked data reportedly includes names, home addresses, phone numbers, emails, job titles, specialties, and affiliated hospitals.
Cybernews researchers examined a sample of the data and believe it may have originated from a breach involving a third-party service provider. The mix of personal and professional accounts suggests the information could have been compiled from multiple sources or from a breach that has not yet been publicly disclosed. Some email addresses in the sample have never appeared in previous leaks, adding weight to this theory.
The forum user who shared the database has a history of posting similar leaks categorized by region and industry. According to Cybernews, this individual may be gathering data from various origins but remains vague about the exact sources.
The leaked details pose serious risks. Cybercriminals could use them for identity theft, creating fake accounts in victims’ names. Given the targeted nature of the data, attackers are also likely to launch phishing campaigns tailored to medical professionals, aiming to extract more personal information or deliver malware.
Healthcare data is especially valuable in the criminal world. It can be used to file fraudulent insurance claims or obtain prescription drugs illegally. Moreover, attackers may deploy malware against medical staff to initiate ransomware attacks on hospitals, which are often pressured to pay due to the critical nature of their services.
Found this article interesting? Follow us on X(Twitter) ,Threads and FaceBook to read more exclusive content we post.