Nigerian healthcare provider: 130,000 patient records leaked

Overview

On October 9, 2024, DarkForums Global Moderator Tanaka leaked a CSV file containing 129,825 patient records from a Nigerian healthcare facilities provider. The post states the data spans multiple facilities and was extracted on October 6, 2024, with sample rows showing full patient records.

What was published

The CSV includes the following fields per patient:

• Full name and phone number
• Age, birth date and gender
• Marital status and residence address
• Ward and town identifiers
• Card and payer numbers
• A photo field
• Facility and caregiver identifiers

Sample rows show Nigerian patients with names, phone numbers and March 2024 creation timestamps.

Risks for affected individuals

Nigerian patients in the dataset face a high risk of targeted fraud, since phone numbers and addresses are paired with medical record identifiers. Health-related data combined with photos could be used in identity fraud or extortion attempts.

What remains unknown

• The provider's name is not disclosed in the post
• It is unclear how the data was obtained
• Whether the data is still circulating is not confirmed

What affected people should do

Nigerians who may have records in this dataset should watch for unusual calls or messages referencing their medical details. They should report any misuse of their health records and be cautious of unsolicited requests for money or personal information.