St. Luke’s Medical Center reports data breach via third-party platform

St. Luke’s Medical Center has reported a data breach involving a platform that supports its mobile application. The unauthorized access was linked to a system managed by a third-party service provider.

The hospital stated that the incident potentially affected the personal information of certain patients and employees at its facilities in Quezon City and Global City, Taguig. While the hospital has not disclosed the exact number of individuals impacted or the specific types of data involved, it confirmed that containment measures were implemented immediately upon discovery.

St. Luke’s has engaged independent cybersecurity experts to investigate the breach and stated that hospital operations remain unaffected. The National Privacy Commission (NPC) received the formal notification on October 30 and is currently reviewing the matter through its regular evaluation process. The hospital has committed to notifying individuals whose information may have been compromised.