🚨 CRITICAL CYBERINTEL ALERT: MEDICAL DATA EXFILTRATION – RADIMAGEN (PANAMA) 🇵🇦⚕️🏥🔓 A massive data leak has been detected affecting Radimagen, a major diagnostic imaging center in Panama. Threat actor "ohmydays"—linked to the organization Waxx Org—has publicly released the institution's entire database for free on specialized forums, claiming that the center's infrastructure lacked any security protections. 🏢 Affected Entity: Radimagen, Panama (radimagen.com). 👤 Threat Actor: ohmydays 📂 Compromised Assets: Complete database of patients, physicians, and appointments. 📅 Publication Date: Saturday, May 2, 2026. 📊 Breach Scope (PHI and PII) The exposed information is extremely sensitive and enables detailed medical and personal profiling: Patient Data (38,840 records): Full names, National ID numbers, gender, phone numbers, and dates of birth (DOB). Appointment History (68,814 records): Direct linkage of patients to specific medical studies, types of exams performed, and scheduled times. User Accounts (42,106 records): Email addresses, phone numbers, and access levels/roles within the system. Medical Directory (3,118 records): Detailed information regarding the medical specialists associated with the clinic. 🛡️ Immediate Response Recommendations 🔒 Audit and Vulnerability Remediation: Radimagen must immediately identify the exposed server or database (presumably an open port or cloud misconfiguration) and restrict access. 🔑 Patient Notification: Inform patients regarding the exposure of their data so they may remain alert for any suspicious communications. Monitor; analyzer.vecert.io #CyberSecurity #Panama #Radimagen #DataBreach #HealthData #Cédula #VECERT #InfoSec #SinVerificador 🇵🇦🛡️⚠️🚨⚕️
