Brief
Ampath says 80‑million patient record breach claim overstated
The pathology provider says only demographic information was exposed and the 80 million figure is misleading.
By Felo News Desk · Published
South African pathology service provider Ampath confirmed a cybersecurity incident that compromised certain personal demographic and administrative information, but said no patient medical records, diagnoses, test results or banking details were accessed.
According to Ampath, the breach was detected on 2 October 2026 and the company activated its incident‑response plan, blocking malicious IP addresses, restricting system access, adding endpoint security controls, removing unauthorised files, deactivating exposed accounts and restoring systems from clean backups.
The firm cautioned that the threat actor ByteToBreach’s claim of "80 million patient records" should not be read as 80 million individual patients. Ampath explained that the number likely reflects database entries, as a single patient can generate multiple administrative records over years of interaction.
Independent cyber‑forensic specialists and legal advisers have been engaged to investigate the full scope, and the Information Regulator has been notified. Ampath added that there is no evidence of ongoing unauthorised access and that its cybersecurity team continues to monitor the environment.
Key facts
- Ampath detected the cybersecurity incident on 2 October 2026. (bizcommunity.com)
- The breach affected only personal demographic and administrative data, not medical records. (bizcommunity.com)
- Ampath says the claimed "80 million patient records" refers to database entries, not unique individuals. (bizcommunity.com)
- The company engaged independent forensic specialists, legal advisers and notified the Information Regulator. (bizcommunity.com)
- Remediation steps included blocking malicious IPs, restricting access, adding endpoint security, removing unauthorised files and restoring from backups. (bizcommunity.com)
Sources
- [1] bizcommunity.com — originally reported as “Ampath says data breach claims of “80 million patient records” are overstated”
