Skip to content
Data Breach Affects 11,000 Patients at Heidelberg and 1,600 at Ulm Due to External Service Provider Attack

Data Breach Affects 11,000 Patients at Heidelberg and 1,600 at Ulm Due to External Service Provider Attack

First seen 14 Oct 2026, 20:37 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 14, 2026 at 21:33 UTC
  • •11,000 patients at UKHD and 1,600 at UKU affected by data breach.
  • •Personal and billing data stolen, but clinical systems remained unaffected.
  • •Attack targeted an external service provider, not the hospitals directly.

A cyberattack on an external service provider has compromised data for approximately 11,000 patients at the Universitätsklinikum Heidelberg (UKHD) and 1,600 patients at the Universitätsklinikum Ulm (UKU). The breach involved the theft of personal data such as names, birth dates, and addresses, with some patients also having billing data and, in a few cases, bank account information stolen. The attack did not impact clinical systems or patient care at either hospital. UKHD is notifying affected patients individually, while UKU's medical director emphasized the seriousness of the incident and the need for transparency from the service provider. The attack reportedly occurred in mid-April 2026, but specific details about the attack vector or method have not been disclosed. Both hospitals have ceased data transmission to the external provider following the breach.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-04-15
Cyberattack on external service provider
An external service provider was attacked, leading to data theft affecting multiple hospitals, including UKHD and UKU.
Universitätsklinikum Ulm
2026-10-14
Public disclosure of data breach
UKHD and UKU publicly announced the data breach affecting thousands of patients, detailing the types of data compromised.
Universitätsklinikum Heidelberg

More articles in this cluster (2)

Following this threat?

Track Universitätsklinikum Heidelberg in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (5)

1 / 3

Common questions

What type of data was compromised?
The breach involved personal data such as names, birth dates, addresses, and in some cases, billing and bank account information.
Were clinical systems affected?
No, clinical systems and patient care were not impacted by the cyberattack.
What actions are being taken for affected patients?
Both UKHD and UKU are notifying affected patients individually and are monitoring the situation closely.