---
title: "Data breach at Ampath Laboratories"
description: "Ampath Laboratories, one of South Africa's main pathology service providers, was targeted by a cyberattack. A group calling itself ByteToBreach claimed on a forum on 13 October 2026 to have stolen more than 80 million patient records and published screenshots; the organisation has not confirmed this"
canonical: https://inyourgeek.com/en/fuites-de-donnees/2026-10-13-ampath-laboratories
type: fuite-de-donnees
author: "Sébastien Soulier"
publisher: "InYourGeek"
language: en
datePublished: 2026-10-13
dateModified: 2026-10-13
---
# Ampath Laboratories

Data breach — Critical

Ampath Laboratories, one of South Africa's main pathology service providers, was targeted by a cyberattack. A group calling itself ByteToBreach claimed on a forum on 13 October 2026 to have stolen more than 80 million patient records and published screenshots; the organisation has not confirmed this figure. Ampath says it launched an investigation with external forensic specialists and that the incident has been contained. The affected data may include name, identity number, date of birth, age, sex, language, physical address, email address, mobile number and medical aid information.

Identity and contact details combined with medical aid information can be used for identity theft, targeted phishing or fraud involving health coverage.

| Fact | Value |
| --- | --- |
| Disclosed on | October 13, 2026 |
| Sector | Healthcare |
| Country | South Africa |
| Cause | Undisclosed |
| Severity | Critical |
| Status | Confirmed |

## Exposed data

- Full name
- Identity document
- Date of birth
- Postal address
- Email address
- Phone number
- Other personal data

## What you can do

- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- These documents enable identity theft, and cannot be reissued at will. Keep the notification letter: it proves where the leak came from if an account is opened in your name.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.

## Sources

- [Attackers claim to have stolen 80 million South African patient records in massive Ampath Laboratories data breach](https://databreaches.net/2026/10/13/attackers-claim-to-have-stolen-80-million-south-african-patient-records-in-massive-ampath-laboratories-data-breach/) — DataBreaches.net
- [Attackers claim to have stolen 80 million South African patient records in massive Ampath Laboratories data breach](https://mybroadband.co.za/news/security/672153-attackers-claim-to-have-stolen-80-million-south-african-patient-records-in-massive-ampath-laboratories-data-breach.html) — MyBroadband

_Entry built from the cited sources after a corroboration check, then reviewed before publication._

---

Equivalent HTML page : https://inyourgeek.com/en/fuites-de-donnees/2026-10-13-ampath-laboratories
Published by InYourGeek — https://inyourgeek.com/en/a-propos
Method and safeguards : https://inyourgeek.com/en/methode
Full register : https://inyourgeek.com/en/fuites-de-donnees