{
 "Event": {
  "uuid": "181f07cb-71ef-58b0-a9d0-d6cf685dc0b9",
  "info": "Data Breach at Major Thai Hospital Chain",
  "date": "2026-04-15",
  "threat_level_id": "1",
  "analysis": "2",
  "distribution": "3",
  "published": false,
  "Orgc": {
   "name": "SecurityStudies.info"
  },
  "Tag": [
   {
    "name": "tlp:clear"
   },
   {
    "name": "securitystudies:status=\"curated\""
   },
   {
    "name": "securitystudies:type=\"data_breach\""
   },
   {
    "name": "misp-galaxy:country=\"thailand\""
   },
   {
    "name": "misp-galaxy:sector=\"Healthcare\""
   },
   {
    "name": "misp-galaxy:sector=\"Insurance\""
   }
  ],
  "Attribute": [
   {
    "type": "link",
    "category": "External analysis",
    "value": "https://securitystudies.info/cyber/incidents/data-breach-at-major-thai-hospital-chain/",
    "comment": "SecurityStudies.info entry",
    "to_ids": false
   },
   {
    "type": "link",
    "category": "External analysis",
    "value": {
     "title": "Bangkok Post",
     "url": "https://www.bangkokpost.com/"
    },
    "comment": "source",
    "to_ids": false
   },
   {
    "type": "text",
    "category": "Other",
    "value": "A major Thai private hospital chain (Bangkok Dusit Medical Services / BDMS) disclosed a breach affecting patient records of approximately 2.8 million individuals, including medical records, insurance data, and PII. The breach was discovered during a routine security audit and appears to have involved exploitation of an unpatched Citrix NetScaler vulnerability (CVE-2024-47176). Thai PDPC (Personal Data Protection Committee) opened investigation under PDPA regulations.",
    "comment": "summary",
    "to_ids": false
   }
  ]
 }
}