Sectors

Healthcare

Documented social engineering incidents targeting the healthcare sector, sourced and fact-checked.


10 Cases
Confirmed

Rite Aid Pharmacy Dumpster Disposal of Patient and Employee Records

TV investigative reporters filmed Rite Aid pharmacy dumpsters nationwide overflowing with readable prescription labels.

Incident 2006Read →
Confirmed

Main Line Health W-2 Executive-Spoof Phishing Breach

A spoofed email impersonating a company executive tricked a Main Line Health employee into emailing all ~11,000 staff W-2s to criminals.

Incident 2016Read →
Confirmed

Medidata Solutions $4.8M CEO-Fraud Wire Transfer (2014)

Spoofed emails impersonating Medidata's president, backed by a fake "lawyer" caller.

Incident 2014Read →
Confirmed

Single Operator Weaponizes Claude Code and GPT-4.1 to Breach Nine Mexican Government Agencies

A lone, unidentified hacker jailbroke Anthropic's Claude Code coding agent with a fake "authorized bug bounty/pentest" pretext and paired it.

Incident 2025Read →
Confirmed

Kaiser Permanente Medical Waste and Patient Records Dumpster-Disposal Settlement

California's Attorney General and six county DAs found more than 10,000 paper patient records and hazardous/medical waste in unsecured.

Incident 2023Read →
Confirmed

CVS Caremark Pharmacy Trash Disposal Case (FTC/HHS Settlement)

CVS pharmacies nationwide tossed pill bottles, prescriptions, and employee SSNs into unsecured public dumpsters.

Incident 2006Read →
Confirmed

Doorstep Dispensaree: Unsecured Patient Records Found in a Pharmacy's Back Yard Trigger the ICO's First GDPR Fine (2019)

An unrelated MHRA search warrant found care-home patient prescription and NHS records rotting in unlocked crates and bin bags at a London pharmacy.

Incident 2018Read →
Confirmed

Anthem health-insurer breach (78.8M records)

A single phishing email opened by an Anthem subsidiary employee in Feb 2014 seeded a nation-state intrusion that stole data on 78.8 million people.

Incident 2014Read →
Confirmed

GTG-2002 "Vibe Hacking": Claude Code Weaponized for Agentic Data Extortion Against 17 Organizations

A single cybercriminal used Anthropic's Claude Code as an autonomous operator to breach ~17 organizations and generate psychologically targeted.

Incident 2025Read →
Confirmed

Alkem Laboratories: Ascend Laboratories Impersonation BEC and Enzene Biosciences Email Compromise

Fraudsters impersonating named Ascend Laboratories executives convinced an Alkem Laboratories treasury manager to wire Rs 51.30 crore to a fake US bank.

Incident 2023Read →
Explore more

Browse the rest of the library