An MRN, or medical record number, is a unique identifier used by hospitals, clinics, and other healthcare systems to link a patient to their clinical file. It helps staff retrieve lab results, visit notes, billing records, and treatment history without relying on a person’s name alone.
In cyber security, MRNs matter because they are often stored alongside highly sensitive personal and medical data. If attackers steal or expose records, MRNs can help them correlate identities across systems, increasing privacy and extortion risk. Defenders treat MRNs as protected health information, limit where they are displayed, mask them in logs and reports, and monitor for unusual access to patient-index systems. When leak-site claims mention MRNs, it usually signals possible exposure of structured patient data rather than a simple contact list.