SHINDO3

Toho University Omori Medical Center

LossSize not disclosed

POSSIBLE LEAKHealth / medical / treatment / Date of birthInvestigating

Open in the live monitor ▶
Disclosed
May 28, 2026
Leak
Leak possible
Type
Loss
Status
Investigating
Security spend
Not checked yet
Compensation
Not announced

What leaked

IdentityName, Date of birth
Account dataHospital patient card number
Special-care dataPacemaker settings and measurements at visits, and the condition requiring the pacemaker

Who is affected

  • Patients who had pacemakers implanted at the hospital and attend pacemaker clinics elsewhere

Cause

A pacemaker programmer went missing at contractor MC

Timeline

  1. First disclosure

Response

  • Notified individuals
  • Vendor review

Identifying patients by retention period and contacting them; asked the contractor to report how it was lost and how devices are managed

What you should do

  1. Health data can't be taken back. Don't answer blackmail; call the police (#9110) or the consumer hotline (188)
  2. Check the company's notice to see if you're affected

Lessons for companies

  1. Put security requirements, audit rights and reporting deadlines in vendor contracts
  2. Report to the PPC: preliminary in 3–5 days, final in 30 (60 if malicious)
  3. Run red teaming and AI-assisted hardening, and publish how much you invest

Sources