2026 CR Healthcare (KIMS/Med United) — patient data theft; $100k crypto demand
Data compromised
Patient names, phones, DOB, addresses, laboratory reports, medical photographs, WhatsApp notifications, medical histories (per complaint samples cited by Hyderabad Mail)
Technical writeup
Verified via company complaint — CR Healthcare Services Pvt Ltd vice-president Partha Bhattacharya lodged a Cyberabad cybercrime complaint after attackers allegedly breached the firm’s network supporting Konaseema Institute of Medical Sciences (KIMS) and Med United hospitals in Hyderabad. Hyderabad Mail (Oct 1, 2026) reported the first threat email arrived on the 25th (September 2026) from [email protected], claiming theft from smarthms.in and vendor Alphanova Solutions, attaching sample patient details (names, phones, DOB, addresses, lab reports, medical photos, WhatsApp notifications, medical histories), and demanding $100,000 in cryptocurrency within 72 hours. A second email tagged chairman/director addresses after no response. Internal cybersecurity inquiry and police investigation ongoing. No public patient census published — recordsAffected 0. companyConfirmed true (victim complaint).
Root cause
Network/platform compromise of CR Healthcare healthcare systems (smarthms.in / vendor Alphanova Solutions alleged by attackers); extortion emails with patient-sample proof (Cyberabad complaint)