St. Luke’s confirms data breach involving patients, employees

St. Luke’s Medical Center confirmed that its mobile application was compromised, potentially exposing the personal information of some patients and employees.

“St. Luke’s Medical Center wishes to inform the public that it recently identified unauthorized access to a platform supporting its mobile application, managed by a third-party service provider. The incident potentially affected certain personal information belonging to some of our patients and employees,” it said in a statement posted on 30 October.

The medical institution said it immediately implemented containment measures upon discovering the incident and engaged independent cybersecurity experts to investigate.

Despite the incident, hospital management maintained that its operations remain unaffected and that patient care continues to be its highest priority.

“Individuals whose personal information may have been involved will be notified directly.

“St. Luke’s sincerely apologizes for any concern this incident may cause and remains committed to protecting the privacy and security of our patients and employees,” it said.

The National Privacy Commission has yet to issue a comment on the matter.