Star Health Data Breach: Sensitive Customer Information Leaked via Telegram Chatbots

SUMMARY

  • Star Health customer data, including medical reports, was leaked via Telegram chatbots, raising privacy concerns.
  • Telegram has taken down the chatbots, but new ones have emerged offering the same stolen data.
  • Star Health reported the breach to authorities, assuring customers that their privacy remains a top priority.

Sensitive customer data from Star Health and Allied Insurance Ltd. has been found circulating on Telegram through chatbots, raising significant privacy concerns. Medical records, personal information, and policy documents were made accessible to the public after being leaked via chatbots. This comes just weeks after Telegram’s founder faced accusations of allowing criminal activities to flourish on the platform.

A security researcher uncovered that the data of millions of individuals, including medical reports, names, contact details, and identification information, were available for sale through these chatbots. Star Health acknowledged the breach, reporting it to local authorities, but stated that no “widespread compromise” occurred, and claimed that “sensitive customer data remains secure.”

The leaked data includes documents dating back to July 2024, showcasing details such as policy numbers, medical diagnoses, and even treatment records. Telegram, upon learning about the chatbots, took action to remove them but admitted that new ones have since emerged offering the same stolen data. Despite the breach, Star Health shares closed higher at ₹617 on Friday.