Telangana Cyber Security Bureau Registers Case Over Alleged Leak of Private Hospitals Patient Data
The Telangana Cyber Security Bureau (TGCSB) has registered a case following allegations that sensitive patient health records, personal information, and confidential internal documents from Private Hospitals were illegally published on an unauthorised website. The complaint was filed by Rahul Medakkar, Chief Executive Officer of Private Hospitals, after the hospital’s IT team discovered confidential data hosted on a website identified as “warehouse.diy” without any authorisation. According to the complaint, login credentials to access the website were also being circulated through messaging platform WhatsApp.
The exposed data allegedly includes patients’ personal details, medical records, employee information, and confidential hospital documents. Hospital authorities have warned that the data leak could expose patients and staff members to serious risks including identity theft, financial fraud, harassment, and reputational damage. The breach raises significant concerns about the security of sensitive healthcare information and the potential misuse of personal data belonging to both patients and employees of the hospital.
Private Hospitals clarified in its complaint that it shares data only with its authorised technology partners for legitimate business purposes. The hospital named five authorised partners: Kranium Healthcare Systems, HEAPS Health Solutions India, Verventus Healthtech (Medblaze), IMImobile Cloud Communications (Cisco), and MarketXpander Services. The hospital management denied authorising any other entity to access or publish the information, suggesting that unknown persons intentionally obtained and published the confidential data.
The hospital has requested police to identify those responsible for the data breach, block the unauthorised website, and preserve server logs and metadata for investigation purposes. The Telangana Cyber Security Bureau has taken up the matter seriously and booked a case under relevant sections of the Bharatiya Nyaya Sanhita (BNS) and the Information Technology Act. Investigations are currently underway to trace the source of the breach and identify the individuals or groups responsible for the unauthorised access and publication of sensitive data.
The case highlights growing concerns about cybersecurity in the healthcare sector, where vast amounts of sensitive personal and medical information are stored digitally. Healthcare institutions across the country have been increasingly targeted by cybercriminals seeking to exploit valuable patient data. The TGCSB is conducting a thorough investigation to determine how the breach occurred and to ensure that those responsible are brought to justice under applicable cyber laws.
