Медицинская лаборатория Гемотест (Gemotest) Data Breach
Gravity Score
CriticalCalculated based on the types of data exposed (8 categories) and the volume of affected records (6,341,495).
Health related data demands extra protection because it can be both personal and highly actionable for fraud. In the Gemotest case, a Russian medical laboratory company suffered a breach that exposed information about a very large number of patients, and the organization was later fined.
The incident involved records that can directly identify individuals. Even without detailed test results, the combination of identity data with insurance and official identifiers can support serious misuse.
Exposed fields included names, email addresses, physical addresses, dates of birth, and gender. The leak also contained government issued identifiers such as passport numbers, along with health insurance information.
Reports referenced around 31 million patients, with about 6.3 million unique email addresses in the dataset. At this scale, the impact can include widespread phishing, identity fraud, and impersonation of insurers or clinics using accurate personal details.
Exposed data
What to do based on this breach
What can we learn from this breach?
Breaches in healthcare organizations show that identifiers, addresses, and insurance information must be treated as high risk data. Good practice includes strict access controls, encryption, auditing, and timely transparent communication with affected people. Data minimization and shorter retention also reduce harm when an incident occurs.
Was your data exposed?
Check now if your email appears in this breach. It's free, takes 30 seconds and requires no signup.
Check my email
