St. Luke’s Medical Center probing cybersecurity incident on mobile app | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #ransomware

By JEAN MANGALUZ, GMA News Published November 3, 2026 2:27pm Updated November 3, 2026 2:55pm Add GMA on Google Make this your preferred source to get more updates from this publisher on Google. Private healthcare provider St. Luke’s Medical Center has said it is investigating a “cybersecurity incident” that it detected on its mobile application.In a statement issued Monday, the company said, “On October 29, 2026, St. Luke’s Medical Center identified a cybersecurity incident affecting a portion of the platform that supports our mobile application, which is managed by a third-party service provider.”St. Luke’s did not specify the extent of a potential data exposure, but assured that critical patient data records are intact.”Our Electronic Medical Records (EMR) and other core clinical systems are unaffected. The EMR is the heart of our patient information, holding the records our team relies on to care for our patients,” the statement read.The healthcare provider added that it carried out immediate mitigation protocols and reported the matter to National Privacy Commission.”Upon detection, we immediately initiated containment and remediation measures. The affected platform was isolated and secured, and the mobile app was taken offline. We engaged independent cybersecurity experts to conduct a comprehensive forensic investigation and to further strengthen our security safeguards,” it added.The medical center had initially posted about the breach in a notice on October 30 on its website. At the time, the hospital admitted that “the incident potentially affected certain personal information belonging to some of our patients and employees.” Despite this, St. Luke’s Medical Center said that hospital operations remained unaffected. Meanwhile, the public is urged to be cautious of any communication asking for personal information. “We encourage the public to be cautious of any communication asking for personal information and to verify the legitimacy of requests before sharing anything. St. Luke’s will not initiate contact to request or verify personal information,” the hospital said in a statement. The hospital management has also apologized for the incident, saying that it remained committed to safeguarding its stakeholders’ data. — VDV, GMA News

——————————————————-
Click Here For The Original Source.

Related