Talking Smack About a Doctor Got Him Access to Private Medical Files
The Register, Thursday, July 23rd, 2026
A red teamer bypassed hospital security using scrubs, a fake badge and complaints about a difficult doctor.
Security tester Dahvid Schloss gained unauthorized access to a hospital records room by wearing scrubs, carrying a non-functional badge and bonding with a nurse over shared frustrations about a real physician.
He later found that hospitals often lack basic network security, with unencrypted medical device data accessible over guest Wi-Fi.
The incident illustrates how hospitals prioritize operational continuity over security controls, creating vulnerabilities that malicious actors could exploit just as easily.