Cyberattack on External Billing Service Affects Multiple German Hospitals

A cyberattack on external billing service providers has compromised patient data across several German hospitals, including the Universitätsklinikum Freiburg, Universitätsklinikum Düsseldorf, and Universitätsklinikum des Saarlandes. The attack, which occurred in mid-April 2026, primarily affected patients with private insurance and self-payers. The Universitätsklinikum Freiburg reported that data from approximately 54,000 patients was stolen, including personal and billing information. The Universitätsklinikum Düsseldorf confirmed over 3,000 affected cases, with 162 potentially involving health data. The Universitätsklinikum des Saarlandes noted that 1,266 patients' data was compromised, primarily consisting of basic personal information. All hospitals have assured that clinical systems and patient care were not impacted. The hospitals are working with authorities and the affected service providers to assess the situation and inform patients. The data breach has raised significant concerns regarding the security of sensitive health information.

Key Points: • Over 54,000 patients' data compromised at Universitätsklinikum Freiburg. • Universitätsklinikum Düsseldorf reports over 3,000 affected cases, including health data. • Universitätsklinikum des Saarlandes confirms 1,266 patients' data stolen, mostly personal information.