EsSalud Peru: Alleged Data Leak Reported

A user identified as DeadM4n posted a thread on a cybercrime forum titled "ESSALUD PERU" and claimed to have compromised information from EsSalud, along with a sample of alleged data tied to the institution. Based on the sources consulted, the post does not independently confirm whether there was a direct intrusion, when it may have happened, or how many people could be affected.

What information may have been exposed?

The allegedly exposed information would include names, sex, addresses, phone numbers, identity documents, file codes, transfer requests, referrals, and appointments between medical facilities, according to Perú21. If authentic, that set of records would combine personal and medical-care data that could be used for impersonation or fraud.

What can be said about the origin of the material?

For now, the only thing that can be said is that the post attributes the material to an alleged breach of EsSalud, but it does not on its own provide enough evidence to establish the exact source of the data. Lado.mx notes that the entry does not make it possible to determine whether the leak came from direct access to systems, or to set a date for the alleged incident.

Why does the exposure of this data raise concerns?

Lado.mx warns that insured-person information like this could be used to carry out fraud and impersonation. In the same way, the mix of personal identifiers with data tied to appointments, referrals, and transfers could help enable scam attempts aimed at patients or healthcare staff.

At this point, the available material is limited to DeadM4n's public claim and the description of a sample shared on a cybercrime forum. Based on those sources alone, there is no official confirmation of a breach, the true volume of compromised information, or the number of people affected.