Ampath Downplays Data Exposure Claims

Ampath confirmed a cyber attack on October 2, with ID numbers and medical aid details potentially accessed. The company says there is no evidence of compromised patient medical records, diagnoses, or banking information. The investigation is ongoing, with independent cyber forensic specialists and legal advisers helping to establish the full scope and impact.

Ampath believes the reported figure of 80 million patient records exposed materially overstates the number of individuals potentially affected. The company notes that a single patient can generate multiple database entries over years of registrations, account updates, and other interactions.

The company has activated its incident response protocols, implemented measures to block malicious IP addresses, and addressed identified vulnerabilities. Ampath has notified the Information Regulator and is cooperating with relevant authorities, with no evidence of ongoing unauthorized access.