THEY PUBLISHED GYNECOLOGICAL FINDINGS ON THE “DARK WEB”: Hackers stole health and personal data of Serbian citizens!

Files containing hacked health data of Serbian citizens have appeared on the dark web.

According to what can be seen, the hacked data includes – first and last name, address, phone number, doctor’s report with diagnosis, tests and therapy, marital status, company…

The last retrieved record is from December 2025, and data from several years back is available.

Among the names of doctors found in the database are physicians from Narodni Front, KBC Dragisa Misovic, Clinical Center of Serbia, as well as from the Military Medical Academy (VMA) and other health institutions.

What is noticeable is that the majority of the data concerned gynecological patients, so it is possible that data from doctors of other institutions who sent referrals were entered into the database.

Earlier today, we sent questions to the Prosecutor’s Office for High-Tech Crime regarding whether they have knowledge of this database and whether they have launched an investigation, with a request to disclose which data were hacked. We will publish the answers subsequently.

Data of more than 600,000 Telekom users recently hacked

As a reminder, the databases of the Telekom Srbija company were recently hacked, when 600,000 pieces of citizen data became publicly available.

Telekom responded that it was a user database of m:SAT TV users used by Telekom’s technical services during the installation of services or interventions in the field.

“These are not Total TV service users. It is a database of 150,000 users, in which numbers are repeated multiple times, meaning there are more lines than the numbers of unique users themselves. Although the attackers believe it is a larger database, what they possess refers to these 150,000 users, because it is an operational database in which interactions with one user are repeated multiple times. Also, certain sets of data are no longer relevant, as they are older than four years and originate from an application that does not contain all user data,” Telekom stated.