Data Protection Academy » Data Protection News » Data breach in medical practice: patient data online

A computer screen showing a programming language on black and white. Data breach in a doctor's practice

Data breach in medical practice: patient data online

Date: 26.11.2019

Responsible body: Telecom / Medical practice in Celle

Type of data protection violation: Patient data publicly accessible for several months

The patient data of a medical practice in Celle near Hanover were publicly accessible on the Internet for several months. The reason for the breakdown in data protection is said to have been a problem with a Telekom router. The medical practice reported the data leak last Friday to the Lower Saxony supervisory authority.

Telekom announced that the problem had been known since May, but that no further cases of data breaches had occurred. The data leak was fixed by an update of the router.

Media reports mention 30,000 patient files, but this figure has not yet been officially confirmed. Should further examination reveal that the volume has been correctly classified, it can be assumed that there is an extensive data mismatch. In this case, it would have to be examined whether Telekom would have to be held liable for the data leakage.

Categories of data: Details on diseases / medications as well as employment contracts, donations and business analyses of the practice

Country: Germany, Celle

SourceSouth German

Back to the overview of the data breaches 

Caroline Schwabe
Latest posts by Caroline Schwabe (see all)

This might interest you too:

Data breach at Klarna: Third party data visible

Entering a postcode and e-mail was sufficient to view third party data. The autofill function is to blame.

Data breach Microsoft customer records leaked

In December 2019, 250 million support requests to Microsoft were available online for two days. Security researchers reported the data breach to Microsoft.

Massive data breach at car rental company Buchbinder

Over 2.5 million German customers affected. High potential for abuse, use your right to information and ask if you are affected.