Medley, Inc.—Medley's @link clinic system suffered unauthorized access, exposing patient data from up to 787 OB/GYN institutions in Japan
Medley, Inc. disclosed that its @link clinic management system, used by obstetrics/gynecology and other medical institutions in Japan, suffered unauthorized access resulting in a temporary suspension of the service. The company reported the incident to Japan's Personal Information Protection Commission and police, and up to 787 medical institutions using the system may have had patient personal information exposed, including appointment and reservation data. Investigation into the scope and root cause was ongoing as of mid-October 2026.
Scoring Impact
| Topic | Direction | Relevance | Contribution |
|---|---|---|---|
| Data Security | -against | primary | -1.00 |
| Overall incident score = | -0.497 | ||
Score = avg(topic contributions) × significance (high ×1.5) × confidence (0.66)× agency (negligent ×0.5)
Evidence (2 signals)
ITmedia reported up to 787 OB/GYN institutions affected by @link breach, with booking and medical-certificate functions disabled
ITmedia News reported that Medley's @link system, used primarily by obstetrics/gynecology clinics, suffered unauthorized access potentially leaking patient personal information, affecting up to 787 medical institutions and disabling web-based booking and digital medical certificate functions.
Medley's official TDnet disclosure confirmed unauthorized access to @link and temporary service suspension
Medley, Inc. filed an official disclosure notice confirming unauthorized access to its @link clinic management service, temporary suspension of the service, and notification of Japan's Personal Information Protection Commission and police.