Skip to content
Welcome, thoughtbot's Giant Robots listeners!Start here
Hospital Sírio-Libanês
AI-generated illustration
OrganisationBR

Hospital Sírio-Libanês

Private hospital in São Paulo, Brazil.

Hospital Sírio-Libanês disclosed on 16 October that a 21 September attack had reached a reporting system tied to its social projects, while its main patient database and clinical care remained unaffected.

Last refreshed: 22 October 2026 · Appears in 1 active topic

Key Question

Whose records may be affected by the hospital's limited-system incident?

Timeline for Hospital Sírio-Libanês

#15 16 Oct

Disclosed a September breach of a social-projects system

Cybersecurity: Threats and Defences: Sírio-Libanês says patient data at risk
View full timeline →

Background

Hospital Sírio-Libanês is a private hospital in São Paulo, Brazil. It runs social projects alongside clinical care, and an internal reporting system connected to those projects became the focus of its 2026 breach disclosure.

On 16 October, the hospital said an attack on 21 September had reached that reporting system. Names, identity numbers and health data may have been exposed. Hospital Sírio-Libanês said its main patient database was untouched, and care continued. Hospital Sírio-Libanês notified Brazil's data-protection authority and federal police. The organisation also appeared on a criminal leak site.

Hospital Sírio-Libanês distinguished the compromised reporting system from its main clinical database. The disclosure described possible exposure rather than confirmed publication or misuse of the records. It did not name the criminal group behind the leak-site listing.

Common Questions
What happened at Hospital Sírio-Libanês?
The hospital identified possible unauthorised access to an internal reporting system linked to some social projects on 21 September 2026. Its investigation is continuing.Source: Hospital Sírio-Libanês
Was the Hospital Sírio-Libanês patient database breached?
The hospital says the incident concerned a social-projects reporting system, not its general patient database. It has not reported evidence that the possibly accessed information was misused or published.Source: Hospital Sírio-Libanês
What data may have been affected at Hospital Sírio-Libanês?
The hospital says the system may contain identity and contact details, SUS card information, demographic details and information about care delivered through the relevant programmes.Source: Hospital Sírio-Libanês
Did the Hospital Sírio-Libanês incident stop patient care?
No. The hospital says medical care, clinical systems and all appointments continued without interruption.Source: Hospital Sírio-Libanês
Source Material

Written with AI from Lowdown's published reporting. Not individually reviewed by an editor. Updated 22 October 2026. Editorial standards.