Cyber threats / Incident register

Data Breach at Major Thai Hospital Chain

Data breach · Apr 15, 2026
High STIX 2.1 MISP
Summary

A major Thai private hospital chain (Bangkok Dusit Medical Services / BDMS) disclosed a breach affecting patient records of approximately 2.8 million individuals, including medical records, insurance data, and PII. The breach was discovered during a routine security audit and appears to have involved exploitation of an unpatched Citrix NetScaler vulnerability (CVE-2024-47176). Thai PDPC (Personal Data Protection Committee) opened investigation under PDPA regulations.

Sources
Attribution
Unknown
Where
TH Thailand
Sectors: Healthcare, Insurance
EU relevance
Low
No EU member state, EU response or EU project sector involved
Graded by rules: EU member states affected, EU response, EU sanctions, EU projects in the sector hit.