Breaches and incidents

Medley (At-Link clinic booking system): database accessed via planted program, clinics including Fukuda Hospital suspend online booking

Medley said a third party accessed the @link clinic support system, the At-Link patient app and related services between late September and mid-October...

Disclosed
Verification
Checked against a primary source

What happened

  • Medley said a third party accessed the @link clinic support system, the At-Link patient app and related services between late September and mid-October, accessing its database “through an unauthorized program” and obtaining information; Fukuda Hospital (Kumamoto) said it suspended online appointments and that other institutions using At-Link are affected.
  • Root cause: not disclosed beyond a program the third party installed; data types and numbers not stated as of the 23 Oct update.
  • No attacker named.
  • The service was suspended from late on 14 Oct with no restart date; Medley is investigating with an outside specialist.