JubiCare

We noticed an unusual spike in chatter across several dark web forums concerning a substantial dataset purportedly belonging to JubiCare, an Indian telemedicine platform. Initial analysis confirmed the authenticity of a significant portion of the leaked information, which was made available on November 13, 2024. What struck us was the sheer volume of personally identifiable information (PII) and sensitive health-adjacent data, impacting a user base that likely relies on the platform for confidential medical consultations. The broad scope of exposed fields, from basic demographics to contact details, presents a multifaceted risk profile for affected individuals.

The breach, identified as a database compromise, resulted in the exposure of approximately 153,147 unique records, though the total dataset size suggests a broader impact potentially affecting up to 410,000 individuals. The leaked information includes phone numbers, first names, last names, gender, and birthdays. The source structure appears to be a direct dump from a relational database, likely a customer or user profile table. The data was subsequently disseminated on a prominent hacking forum, increasing the immediate accessibility to malicious actors. The inclusion of birthdays, in particular, can be leveraged for social engineering attacks or identity theft, especially when correlated with other exposed PII.

While specific news coverage directly detailing this JubiCare breach is still emerging, the incident aligns with a broader trend of healthcare and telemedicine platforms becoming increasingly attractive targets for data theft. Recent OSINT investigations into similar breaches have highlighted the lucrative market for compromised health records, often used for fraudulent prescription schemes or targeted phishing campaigns. Research from cybersecurity firms consistently points to the healthcare sector as a high-value target due to the sensitivity and longevity of the data it holds.