Philippines' St. Luke's Medical Center says attackers got into the third-party platform behind its eHealth Hub app; the privacy regulator says about 100,000 people are affected
For patients: expect phishing that references St. Luke's or lab results; the hospital is contacting people directly, so verify any notice through its official site. If you reused your app password, change it elsewhere.
For hospitals: patient apps run by vendors sit outside most EMR controls; check what data the vendor platform holds and how fast you can cut it off.
Sources: St. Luke's: Notice on a Data Security Incident (Oct 30) · GMA News: St. Luke's probing data security incident; NPC on ~100,000 affected · Rappler: St. Luke's, NPC investigating data breach on mobile app