SHINDO3

Aomori Prefectural Central Hospital

Patient1people

LEAK CONFIRMEDHealth / medical / treatmentInsider misuse · Closed (final report)

Open in the live monitor ▶
Disclosed
May 1, 2026
Leak
Leak confirmed
Type
Insider misuse
Status
Closed (final report)
Security spend
Not checked yet
Compensation
Not announced

What leaked

Special-care dataAdmission status and diagnosis

How many

  • Patient 1 people

Who is affected

  • A patient known to the worker

Cause

A part-time worker viewed an acquaintance's admission and diagnosis in the e-chart without a work reason and told a third party

Timeline

  1. E-chart viewed with no work reason
  2. First disclosure

Response

  • Governance / committee

The worker was suspended for three months from 30 April; the hospital director and department head were formally warned

What you should do

  1. Health data can't be taken back. Don't answer blackmail; call the police (#9110) or the consumer hotline (188)
  2. Check the company's notice to see if you're affected

Lessons for companies

  1. Report to the PPC: preliminary in 3–5 days, final in 30 (60 if malicious)
  2. Run red teaming and AI-assisted hardening, and publish how much you invest

Sources