SHINDO4

Shin-Sapporo Houwakai Hospital

Medical Corporation Houwakai

Patients4,721people

LEAK CONFIRMEDHealth / medical / treatment / Date of birthImproper disposal · Contained

Open in the live monitor ▶
Disclosed
Jul 30, 2026
Leak
Leak confirmed
Type
Improper disposal
Status
Contained
Security spend
Not checked yet
Compensation
Not announced

What leaked

IdentityFull name, Date of birth
Special-care dataMedical care information, etc.

Not leaked

  • My Number and credit card numbers are not included

How many

  • Patients 4,721 people

Who is affected

  • Patients

Cause

Hard disks handed over for destruction were not destroyed and ended up on an online auction site (the contractor was Reprowork, a waste-disposal firm in Ishikari)

Timeline

  1. First disclosure

What you should do

  1. Health data can't be taken back. Don't answer blackmail; call the police (#9110) or the consumer hotline (188)
  2. Check the company's notice to see if you're affected

Lessons for companies

  1. Put security requirements, audit rights and reporting deadlines in vendor contracts
  2. Report to the PPC: preliminary in 3–5 days, final in 30 (60 if malicious)
  3. Run red teaming and AI-assisted hardening, and publish how much you invest

Sources