Almost 600 Picture Archiving and Communication System (PACS) servers in 52 countries worldwide were publicly available and the systems themselves were found unpatched against thousands of vulnerabilities. PACS are widely used in healthcare to store information from X-Ray, CT or MRI machines with relevant and detailed patient information. Unprotected servers they were stored on leaked 24.3 million patient records - some of the most affected countries are: Italy, Germany, Turkey, Brazil, the US and India.
This is another leak, which will help criminals deploy more effective social engineering and phishing attacks. Such data can be also used in extortion attempts and insurance frauds. This is also a source of easy income - health records on the dark web can cost from $250 to even $1,000.