Blacknet00 Claims Access to 22,000+ East Avenue Medical Center Records
A threat actor identified as Blacknet00 has claimed responsibility for accessing the database of East Avenue Medical Center (EAMC), a government tertiary hospital in Quezon City, and has threatened to sell patient-related information allegedly obtained from the institution's systems.
In a post published on the cybercrime forum, the actor claimed to have gained access to the hospital's database and extracted more than 22,000 medical records belonging to patients. The post, which included screenshots of purported database contents, was presented as an offer to sell the information.
According to the actor's claims, the allegedly compromised data includes patient registration records, dates of birth, contact information, email addresses, gender, marital status, nationality, and hospital registration dates. The actor also claimed to have obtained information concerning attending physicians and hospital departments, including Pediatrics and Neonatology, Emergency, and Outpatient services.
The threat actor further claimed that some records date back to 2021 and remain registered in the system as of October 2026. The screenshots appear to show structured database entries and patient-management activity, but the authenticity, completeness, and origin of the material have not been independently established.
The post also alleges that information associated with hospital personnel and numerous patient accounts was accessible. However, the exact number of affected individuals, the scope of any unauthorized access, and whether the displayed records originated from EAMC's production systems remain unconfirmed.
The potential exposure of healthcare information presents significant privacy risks. Medical and patient-registration data can be exploited for targeted phishing, identity fraud, social engineering, and other forms of abuse. The alleged offer to sell the records raises additional concerns about possible unauthorized distribution.
As of the material reviewed for this report, the claims remain allegations by the threat actor. No independent confirmation of the breach, the number of affected records, or a completed sale has been established from the supplied screenshots. The hospital's response and any official assessment by relevant Philippine authorities would be needed to determine the incident's authenticity and impact.
