The Philippines’ National Privacy Commission says a data breach involving St. Luke’s Medical Center’s mobile-app platform may have affected around 100,000 people, according to GMA News Online’s November 3 report.
Deputy Privacy Commissioner Jose Belarmino II said the incident was the largest among 18 hospital data-breach reports received by the agency.
St. Luke’s detected unauthorized access on October 29 to a third-party platform supporting its eHealth Hub mobile app. In its October 30 notice, the hospital said personal information belonging to some patients and employees may have been affected. It has not named the service provider or publicly detailed the full scope of the exposure.
The hospital said its electronic medical records and other core clinical systems were not affected. It isolated and secured the compromised platform, took the mobile app offline and engaged independent cybersecurity experts to investigate. Hospital operations remained unaffected.
The National Privacy Commission is reviewing the notification and examining whether any lapses occurred. St. Luke’s said it would directly notify people whose information may have been involved. The hospital and regulator have not published a final count or a complete list of data categories involved.
If this article helped you, please consider supporting our work. Every small contribution keeps Abijita.com independent and running.
