2026 Medley — @link clinic system unauthorized access; up to 787 facilities
Data compromised
Patient/personal information registered in @link may have leaked; field inventory and whether a take occurred still under investigation. Maximum 787 medical institutions in scope. No patient-record census. recordsAffected 0.
Technical writeup
Verified Medley TDnet and site notice 15 Oct 2026 (Tokyo 4480). Tip 11 Oct; pause from late 14 Oct; PPC + police. Distinct from Medley Pharmaceuticals (India). companyConfirmed true; recordsAffected 0 pending census.
Root cause
Tip from an outside specialist 11 Oct 2026 of possible third-party access to @link (アットリンク) clinic ops, patient app, and related services. Unauthorized access confirmed; services paused from late 14 Oct. Vector not published.