Exposed to the Bare Bone: When Private Medical Scans Surface on the Internet

Over 1.2 Million Healthcare Devices and Systems Available on the Open Internet
Examples of data being leaked in this way include brain scans and X-rays, stored alongside protected health information and personally identifiable information of the patient, potentially representing both a breach of patient’s confidentiality and privacy.
In the worst-case scenario, leaked sensitive medical information could leave unsuspecting victims open to fraud or even blackmail over a confidential medical condition.
Modat also worked with Health-ISAC to serve as a trusted responsible disclosure agent for the initial findings from this report. Health-ISAC publishes hundreds of Targeted Alerts every year to organizations globally warning them of high risks specific to their network — including things like vulnerable servers, cyber criminals selling access to their networks, stolen intellectual property, compromised credentials, exposed medical devices, open RDP ports and more.
Read the full article, along with mitigation strategies. Click Here
- Related Resources & News
- Frontier AI in the Health Sector: Managing Supply Chain and Vendor Risk
- The State of Enterprise Cyber Crisis Readiness (report)
- Human Risk Management 90-Day Playbook
- Cybercriminals Flock to Healthcare Businesses as Attacks Surge
- DHS Revives Critical Infrastructure Threat Sharing, Without the Legal Shield Industry Wants
- Healthcare’s Governance Needs To Speed Up To Combat Unsanctioned AI Usage
- Monthly Newsletter – July 2026
- Healthcare Cybersecurity in an Era of Geopolitical Instability
- Health-ISAC AAMI eXhange Interview – Medical Device Security
- Rural Hospitals Turn to Threat Intelligence Networks to Strengthen Cybersecurity Defenses