Indian government sites leaking patient COVID-19 test results

silversurfer

Level 85
Thread author
Verified
Honorary Member
Top Poster
Content Creator
Malware Hunter
Well-known
Aug 17, 2014
10,057
Websites of multiple Indian government departments, including national health and welfare agencies, are leaking COVID-19 lab test results for thousands of patients online.

These leaked lab reports which are being indexed by search engines expose patient data, and whether they tested positive for coronavirus.

Google indexes COVID-19 lab test reports

This week, while searching for a means to obtain COVID-19 test results online, I accidentally came across what looked like exposed COVID-19 test results for thousands of patients.

As observed by BleepingComputer, each of these PDF reports showing up on Google were hosted on *.gov.in and *.nic.in domains.

These domains belong to multiple government agencies located in the national capital of New Delhi.

Each PDF contained hundreds of records of patients who underwent an RT-PCR test, and exposed:
  • patient name
  • age and/or date of birth
  • report identifier numbers, including the nationally-trackable Specimen Referral Form (SRF) ID used by government authorities
  • dates of testing
  • hospital site where testing took place and the doctor's information, and
  • whether the patient tested positive or negative for the SARS-CoV-2 virus
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top