SHINDO4

Kansai Medical University Hospital

Patients~1,800people

POSSIBLE LEAKHealth / medical / treatment / Full nameLoss · Closed (final report)

Open in the live monitor ▶
Disclosed
Jun 3, 2026
Leak
Leak possible
Type
Loss
Status
Closed (final report)
Security spend
Not checked yet
Compensation
Not announced

What leaked

IdentityPatient name, Gender
Account dataPatient ID
Special-care dataDiagnoses and admission and discharge dates

Not leaked

  • Phone number
  • Credit card information

How many

  • Patients ~1,800 people

Who is affected

  • Patients

Cause

Loss of a USB memory stick holding patient personal data

Timeline

  1. USB memory stick lost
  2. Found and recovered a few days later
  3. Announced

Response

  • Change process
  • Staff training

Enforced rules on taking media with personal data off site and strengthened staff training

What you should do

  1. Health data can't be taken back. Don't answer blackmail; call the police (#9110) or the consumer hotline (188)
  2. Check the company's notice to see if you're affected

Lessons for companies

  1. Report to the PPC: preliminary in 3–5 days, final in 30 (60 if malicious)
  2. Run red teaming and AI-assisted hardening, and publish how much you invest

Sources