The lab said the results were not in it

The pathology group named the identity fields. The eighty million is still the other man’s table.

Ampath told MyBroadband today that it has reasonable grounds to believe personal information may have been accessed or acquired, that the incident is contained, and that South Africa’s Information Regulator has been told. The fields it lists: name and surname, identity number, date of birth, age, sex, language, physical address, email, mobile. Medical-aid name, membership number, and options. Payment metadata: payer name, an internal reference, amount, date, time. Not every record has every field. The sentence the company put next to that list: there is currently no indication that health, diagnostic, or clinical information was in the affected data. The site was a “coming soon” page in the afternoon and had a statement on it by evening.

ByteToBreach posted the same day. Ten of 375 databases, it said, fully copied: HR, several patient databases, finance, LDAP, providers. The lab’s admission table alone, in that post, held well over 80 million records, from the mid-2000s to now. One of the sample downloads, scanned on VirusTotal in that reporting, was malware. That is not a finding that the listing is empty. It is a finding that a zip on a forum is not a lab export.

What 80 million will be asked to cover

It will be briefed as every blood result in the country. Ampath’s own list does not have a result on it. Medical-aid membership next to an identity number is already enough for a call that pretends to be the scheme. It is not a diagnostic file. Do not paste the admission-table sentence onto a briefing that the company has not numbered. Do not brief the results as safe because the company said they were not in this set. That sentence is about the set it is looking at today.

If you are an Ampath patient, the fields they listed are the incident until they subtract. A mail that already knows the scheme number is the next page of that list. A mail with a “lab results” attachment is someone else’s zip. The company has said it is watching for fraud and impersonation. Treat banking asks as unrelated until they are not.

Eighty million is a post. The field list is a notification. Keep them in different sentences.