Medical data is any health-related information about a person, such as diagnoses, test results, prescriptions, treatment notes, insurance details, or hospital records. It is highly sensitive because exposure can harm privacy, enable fraud, and create legal and operational problems for the organization that holds it.
In cyber security, medical data is a high-value target for extortion, theft, and unauthorized disclosure. Attackers may try to steal it from file shares, databases, backups, or endpoint devices, then use it to pressure a hospital or clinic. Defenders treat this data with stricter access controls, encryption, logging, and retention limits, because even claims of exposure can trigger urgent response and public concern. When a threat actor says it has medical data, the claim should be verified through internal evidence such as access logs, file activity, and data-loss checks before conclusions are drawn.