{"id":2843,"date":"2026-06-22T10:38:02","date_gmt":"2026-06-22T08:38:02","guid":{"rendered":"https:\/\/blog.eprivacy.eu\/?p=2843"},"modified":"2026-06-22T10:38:03","modified_gmt":"2026-06-22T08:38:03","slug":"hackers-steal-patient-data-from-hospitals","status":"publish","type":"post","link":"https:\/\/blog.eprivacy.eu\/?p=2843","title":{"rendered":"Hackers Steal Patient Data from Hospitals"},"content":{"rendered":"\n<p>In April, the billing service provider Unimed fell victim to a cyberattack with far-reaching consequences: Over 100,000 patient records from major hospitals across Germany were stolen. Unimed handles billing for medical services and treatments for more than half of Germany\u2019s large hospitals.<\/p>\n\n\n\n<p>The attack targeted data from private patients and self-payers. The University Hospital Cologne reported that over 30,000 patients were affected. The University Medical Center Hamburg-Eppendorf (UKE) confirmed 5,000 impacted patients, while hospitals in southern Germany (Freiburg, Heidelberg, Ulm) account for around 72,000 affected individuals.<\/p>\n\n\n\n<p>According to Unimed, the company responded quickly upon discovering the breach, engaging IT forensic experts and an incident response team. Additionally, the Federal Office for Information Security (BSI) and the relevant data protection authority were notified.<\/p>\n\n\n\n<p>Hospitals are frequent targets of cyberattacks because they are part of critical infrastructure, hold sensitive patient data, often invest little in IT security, and must act swiftly in emergencies\u2014where lives may be at stake. The primary motive for attackers is usually financial gain. The stolen data could be used for social engineering attacks, with hackers making targeted calls or sending emails to manipulate patients into unwanted actions.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In April, the billing service provider Unimed fell victim to a cyberattack with far-reaching consequences: Over 100,000 patient records from major hospitals<\/p>\n<p class=\"link-more\"><a class=\"myButt \" href=\"https:\/\/blog.eprivacy.eu\/?p=2843\">Read More<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/blog.eprivacy.eu\/index.php?rest_route=\/wp\/v2\/posts\/2843"}],"collection":[{"href":"https:\/\/blog.eprivacy.eu\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.eprivacy.eu\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.eprivacy.eu\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.eprivacy.eu\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2843"}],"version-history":[{"count":1,"href":"https:\/\/blog.eprivacy.eu\/index.php?rest_route=\/wp\/v2\/posts\/2843\/revisions"}],"predecessor-version":[{"id":2844,"href":"https:\/\/blog.eprivacy.eu\/index.php?rest_route=\/wp\/v2\/posts\/2843\/revisions\/2844"}],"wp:attachment":[{"href":"https:\/\/blog.eprivacy.eu\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2843"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.eprivacy.eu\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2843"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.eprivacy.eu\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2843"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}