200,000 Indians Affected by Health Record Breach: Supreme Court Seeks Centre and CBI Response

The Supreme Court of India has issued formal notices to the Central Government and the Central Bureau of Investigation regarding a petition that demands a federal probe into an alleged breach of sensitive medical data belonging to over 200,000 Indian citizens.

A three-judge bench comprising Chief Justice of India Surya Kant, Justice Joymalya Bagchi, and Justice V. Mohana sought detailed responses from statutory authorities after healthtech firm Vitraya Technologies filed a writ petition seeking a court-monitored investigation.

The petition highlights severe vulnerabilities in health data infrastructure and warns of national security threats linked to unauthorized access to citizens' personal medical histories.

Core Aspects of the Data Breach Petition:

• Affected Individuals: Over 200,000 Indian policyholders and patients whose medical records, insurance claims, and personal identifiers were allegedly exposed.

• Requested Relief: A centralized, court-monitored investigation led by the Central Bureau of Investigation (CBI) alongside national cyber-emergency response agencies.

• Respondents Named: The Union Ministry of Electronics and Information Technology, the Ministry of Home Affairs, the CBI, and national cybersecurity bodies.

• Legal Grounding: Enforces constitutional right to privacy standards established under Article 21 and statutory data protection frameworks.

Growing Threats to Healthcare Cyber Infrastructure

The petition asserts that local law enforcement agencies cannot adequately investigate digital breaches spanning multiple state jurisdictions and offshore servers.

Vitraya Technologies argued that health data breaches pose risks far beyond financial fraud, exposing sensitive diagnostic histories, hospital records, and identity documents to malicious dark-web brokers.

The filing calls for standardized cybersecurity protocols across healthcare providers, insurance clearinghouses, and third-party tech vendors to prevent systemic data leaks.

Key Issues Raised Before the Court:

• Jurisdictional Limits: State police departments face legal and technical constraints when tracking cross-border cybercriminals.

• Corporate Accountability: Health fiduciaries and insurers must maintain audited cybersecurity safeguards to protect patient files.

• Systemic Risk: Unchecked leaks of personal health data undermine public trust in national digital health ecosystems.

Apex Court Demands Central Oversight

During the initial hearing, the Supreme Court acknowledged the magnitude of data protection concerns involving health records.

The bench directed the respondents to clarify existing regulatory steps taken to mitigate the leak and state whether a centralized investigative agency should take over all related complaints.

The court listed the matter for further hearing following the receipt of official counter-affidavits from the central government and investigative bodies.