Global medical data leak

Relevance: Mains: G.S paper II: Health

Why in news?

  • Medical details of over 120 million Indian patients have been leaked and made freely available on the Internet, according to a recent report published by Greenbone Sustainable Resilience, a German cybersecurity firm.
  • What is even more worrying is that the number of data troves containing this sensitive data went up by a significant number in the Indian context a month after Greenbone’s initial report was published. The updated report also places Maharashtra at the top of the States affected by the leak.

Key facts:

  • The first report was published in October last year, in which Greenbone revealed a widespread data leak of a massive number of records, including images of CT scans, X-rays, MRIs and even pictures of the patients.
  • The follow-up report, classifies countries in the “good”, “bad” and “ugly” categories based on the action taken by their governments after the first report was made public.
  • India ranks second in the “ugly” category, after the U.S.
  • The report says that in 60 days after the first report was put out, the number of data troves bearing the patients’ information went up from 6,27,000 to 1.01 million, and that the images of patients’ details rose from 105 million to 121 million.
  • It is a notable fact for the systems located in India, that almost 100% of the studies (data troves) allow full access to related images.
  • As per the follow-up report, Maharashtra ranks the highest in terms of the number of data troves available online, with 3,08,451 troves offering access to 6,97,89,685 images. The next is Karnataka, with 1,82,865 data troves giving access to 1,37,31,001 images.

PACS servers

  • Greenbone’s original report says the leak was facilitated by the fact that the Picture Archiving and Communications Systems (PACS) servers, where these details are stored, are not secure and linked to the public Internet without any protection, making them easily accessible to malicious elements.

 

Leave a Reply

Your email address will not be published. Required fields are marked *