Over a Million Medical Devices Exposed Online, Revealing Private Patient Scans

Confidential by Design, Public by Mistake
The healthcare industry’s digital expansion may be exposing more than it protects. How would you feel if strangers online saw your MRI scan and knew your diagnosis, maybe even before you did?
That’s not a hypothetical, it’s already happening.
New research from Modat shows that more than 1.2 million internet-connected healthcare devices and systems are publicly accessible online, leaking private patient data (from brain scans to blood tests) through basic security lapses.
Errol Weiss, Chief Security Officer at Health-ISAC, added: “The findings from Modat underscore a critical and pervasive challenge facing healthcare globally. We consistently emphasize that cybersecurity is inextricably linked to patient safety and operational continuity. This research reinforces the urgent need for comprehensive asset visibility, robust vulnerability management, and a proactive approach to securing every internet-connected device in healthcare environments, ensuring that sensitive patient data remains protected from unauthorized access and potential exploitation.”
Modat worked closely with Health-ISAC to handle the findings responsibly, sharing details with impacted organizations. The firm also coordinated with Z-CERT, a cybersecurity response group focused on healthcare in the Netherlands.
Read the article in Information Security Buzz. Click Here
- Related Resources & News
- Health-ISAC® Director of European Operations Elected European Council of ISACs Chair
- CTEM 101: Moving from Spreadsheets to Continuous Risk Reduction
- Monthly Newsletter – October 2026
- OpenAI pledges $1B to provide resources, training for frontline cyber defenders
- Health-ISAC Hacking Healthcare 9-29-2026
- Healthcare Cybersecurity is Entering the Era of Collective Defense
- Healthcare’s cyberattack problem is getting worse
- Cybersecurity in the AI Era
- 2026 Annual Health-ISAC® Member Satisfaction Survey Results
- Disrupting EvilTokens: The AI Chatbot Built for Cybercrime