Data breach at Egypt's health service

The Egyptian Health Department (EHD) suffered a cybersecurity incident on December 21st, 2023, in which an external actor managed to access its systems and exfiltrate employee, patient and customer data.

Among the data extracted from employees, we can find the name, social security number, driver's license number or other government identifiers, as well as banking and/or insurance data. Patient and/or customer data includes name, date of birth, medical information and insurance information. For the users' peace of mind, there is no evidence that the data has been made public or is being used for any fraud.

Upon detection of the incident, EHD contacted an American security firm, Federman & Sherwood, to investigate the incident, which was completed on July 12. In addition to remediating the vulnerabilities and conducting an in-depth review of the entity's cybersecurity.