2026 Hospital Albert Einstein — cyberattack; patient database access (no census)
Data compromised
Per hospital statements in Brazilian press: personal registration data (name, CPF and/or DOB) and possible health-assistance data (prescriptions, exam results, other clinical documents). Fragmented/decentralized storage; affected patients notified by email. No evidence of improper public use at disclosure. No published headcount — recordsAffected 0. Care and EHR systems continued normally.
Technical writeup
Verified via Hospital Israelita Albert Einstein statements reported 8 Oct 2026 (G1, Estadão, Security Leaders). Suspected incident 4 Aug 2026; unauthorized access to part of patient DB; ANPD and Federal Police notified; PF operation in Joinville reported. Patients notified individually by email; no census published. companyConfirmed true; recordsAffected 0.
Root cause
Cyberattack with unauthorized access/acquisition of part of the patient database (suspected 4 Aug 2026; public confirmation ~8 Oct 2026)
References
- https://g1.globo.com/sp/sao-paulo/noticia/2026/10/08/einstein-hospital-israelita-e-alvo-de-ataque-cibernetico-e-dados-de-pacientes-sao-acessados-pf-investiga.ghtml
- https://securityleaders.com.br/einstein-divulga-comunicado-sobre-incidente-de-seguranca-apos-liberacao-da-anpd/
- https://www.estadao.com.br/tecmundo/ciberseguranca/einstein-comunica-pacientes-que-tiveram-dados-vazados-em-ataque-cibernetico/