On October 28, 2024, Fortis Hospital Bannerghatta Road in Bengaluru appeared on the LockBit 5 ransomware leak site, claiming that internal files had been exfiltrated during a ransomware attack. The listing affects anyone whose medical, personal, or administrative records were held by the 284-bed facility, placing patients, staff, and their families at direct risk of identity theft and extortion.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Not ready yet? Run a free breach check on this email
We’ll check it against 13.1B+ leaked records right now — no account needed. Continuous monitoring & alerts are part of Protection.
Primary Disclosure Details
The LockBit 5 leak site states that Fortis Hospital Bannerghatta Road suffered a ransomware intrusion and that attackers successfully exfiltrated internal files. The disclosure does not quantify the number of affected records, list specific data types beyond internal files, or provide a ransom demand or payment deadline. The hospital has not yet issued a public breach notification detailing the scope, so the exact volume and sensitivity of the stolen data remain unknown to the public.
Why This Matters for You and Your Family
When a hospital’s internal files are stolen, the exposure goes far beyond clinical notes. Medical records frequently contain full names, dates of birth, addresses, phone numbers, insurance details, Social Security numbers or Aadhaar equivalents, and treatment histories. If your family has received care at Fortis Bannerghatta or shares an address with someone who has, those details may now be in the hands of professional extortionists. A single leak can trigger cascading fraud: fraudulent insurance claims, tax fraud using your identity, or targeted phishing that references your actual medical conditions to appear legitimate.
Doxxing and Identity-Chain Risks
Medical data is high-value fuel for doxxing chains. Attackers combine leaked hospital files with credential dumps from other breaches to link your email address, phone number, insurance ID, and family members’ names. Once these connections are mapped, criminals can hijack online accounts, impersonate you to banks or government agencies, or publicly shame victims by releasing sensitive health information. Gaming accounts belonging to children are especially vulnerable because the same passwords or recovery emails used for a hospital patient portal are often reused on Steam, Roblox, or Epic Games. A single reused credential can hand over an entire household’s digital life.