St. Luke's Medical Center probing data security incident on mobile app

Make this your preferred source to get more updates from this publisher on Google.

Private healthcare provider St. Luke's Medical Center has said it is investigating a "cybersecurity incident" that it detected on its mobile application.

In a statement issued Monday, the company said, "On October 29, 2026, St. Luke's Medical Center identified a cybersecurity incident affecting a portion of the platform that supports our mobile application, which is managed by a third-party service provider."

St. Luke's did not specify the extent of a potential data exposure, but assured that critical patient data records are intact.

"Our Electronic Medical Records (EMR) and other core clinical systems are unaffected. The EMR is the heart of our patient information, holding the records our team relies on to care for our patients," the statement read.

The healthcare provider added that it carried out immediate mitigation protocols and reported the matter to National Privacy Commission.

"Upon detection, we immediately initiated containment and remediation measures. The affected platform was isolated and secured, and the mobile app was taken offline. We engaged independent cybersecurity experts to conduct a comprehensive forensic investigation and to further strengthen our security safeguards," it added.

St. Luke's said it is currently notifying people whose personal information may have been affected. — VDV, GMA News