SHINDO4

National Hospital Organization Nagoya Medical Center

Patients591people

POSSIBLE LEAKHealth / medical / treatment / Full nameLoss · Closed (final report)

Open in the live monitor ▶
Disclosed
Jul 17, 2026
Detected
May 22, 2026
Detection to disclosure
56 days
Leak
Leak possible
Type
Loss
Status
Closed (final report)
Security spend
Not checked yet
Compensation
Not announced

What leaked

Account dataPatient ID
IdentityFull name, Age
Special-care dataSurgery names, bronchoscopy data, test dates, cancer stage, lesion size

How many

  • Patients 591 people

Who is affected

  • Patients

Cause

A staff member took a personal USB stick to a dispatch hospital and lost it on the way home

Timeline

  1. The loss was noticed after returning home from a dispatch hospital
  2. Found on a public transport seat and recovered
  3. First disclosure

Response

  • Staff training
  • Change process

Ban on personal USB sticks, strict limits on taking storage media out, more security training and audits for staff

What you should do

  1. Health data can't be taken back. Don't answer blackmail; call the police (#9110) or the consumer hotline (188)
  2. Check the company's notice to see if you're affected

Lessons for companies

  1. Report to the PPC: preliminary in 3–5 days, final in 30 (60 if malicious)
  2. Run red teaming and AI-assisted hardening, and publish how much you invest

Sources