๐ฅ BREACHES & INCIDENTS
- Polish dental software vendor FELG Dent reports breach of ~2 million patient records and ransom demand
FELG Software disclosed a breach of its FELG Dent dental platform in which an attacker claims to hold patient data and demands a ransom.- Affects dental practices in Poland using FELG Dent software; FELG processes patient data on their behalf as data controller remains the practice.
- FELG estimates about 2 million patient records exposed, including names, addresses, PESEL national ID numbers, medical data, e-prescriptions, e-ZLA sick-leave certificates, and eWUล insurance verification data; some staff records also involved.
- Attacker using the alias Horus exploited IDOR vulnerabilities in the FELG Dent API, registering a demo account and incrementing query parameters to read records without authorization checks; exfiltration began September 6 and was detected September 28, 2026.
- Attacker claims to hold about 10% of the database and, after failed ransom negotiations, threatens to sell it on a dark web forum; FELG denies some claims, and Zaufana Trzecia Strona reports the Fingerprint group was not involved.
- FELG has notified the prosecutor's office and Poland's data protection authority (UODO), fixed the insecure endpoints, and is providing affected practices with GDPR breach notification tools.
Sources ๐ Source: status.felg.cloud ยท ๐ Coverage: pelnomocnikcyber.pl ยท ๐ via r/cybersecurity
๐ CVEs & KEV
- CVE-2026-18397 โ Thales SConnect โ CVSS 9.4 โ SConnect: Native Host Unauthenticated Remote Code Execution VulnerabilityThis...