Researcher claims 1.2 crore medical records exposed, Noida-based lab denies breach

A cybersecurity researcher claimed to have discovered an unprotected database of a diagnostic centre based in Noida, which reportedly housed over 1.2 crore records comprising medical diagnostic scans, test results, and potentially sensitive medical records.

In an email shared with Hindustan Times, Jeremiah Fowler, a security researcher from Ukraine, shared the images of the purported lab records and said, “The database contained a massive amount of medical test results that included the names of patients, doctors, if the testing sample was done at home or at a medical facility, and a wide range of other sensitive health information. The total number of records was significant, at a count of 12,347,297 with a total size of 7TB. Upon further investigation, the documents were marked as belonging to an India-based company called Redcliffe Labs.”