Kaspersky warns of Digital Medicine Risks

Recent incidents show that medical services can be breached, and as a result, medical records may be leaked and then traded on the dark web. The operations of healthcare services can get disrupted. Another aspect is that healthcare platforms may share user data with third parties that handle it irresponsibly.

Kaspersky warns of risks tied to the digitization of healthcare and the use of telemedicine.

Telemedicine has moved from a convenience to a core part of healthcare delivery, but its security model has not kept pace with its adoption, and the risks are not theoretical. Recent incidents highlight how real these risks have become.

In 2023, it was disclosed that Cerebral, a major telehealth provider focused on mental health services, had been sharing sensitive patient data—including mental health assessments, intake information, and personal identifiers—with third-party platforms such as social media and advertising networks. Millions of users were affected over several years. 

More broadly, incidents in 2025 illustrate a different but equally critical risk—large-scale disruption of digital healthcare infrastructure. The breach of the ManageMyHealth patient portal exposed sensitive medical records of more than 120,000 patients, while the attack on SimonMed Imaging compromised over a million records and led to ransomware demands. These cases show that both telemedicine platforms and the broader digital healthcare ecosystems are increasingly targeted by attackers.

“The digital healthcare experience is transforming access to care, but it is also expanding the attack surface in ways many users underestimate. Medical data is highly valuable and actively traded on the dark web, making patients a prime target for fraud and targeted phishing. At the same time, health-related scams exploit urgency and trust, using fake consultations or discounted offers to trick users into sharing sensitive information. Patients should approach digital healthcare with the same caution as financial services—verifying providers, avoiding unsolicited links, and understanding how their data is used. Security and privacy must become a core part of the digital healthcare experience,” comments Anna Larkina, Web Content and Privacy Analysis Expert at Kaspersky.