Public explainers
Health, school, and why leaked data ages badly
Some leaks look small because they are not passwords. Contact details, absences, and records tied to health or school stay useful to criminals for a long time.
Sensitive does not always mean a medical record
A health-themed leak can be contact and delivery details from a public-health platform, with no medical file attached. That is still enough to send a message about a vaccination, a kit, a reimbursement or an appointment that uses your real address and phone number.
A medical software incident is a different problem. If the patient-data scope is not published, treat it as unknown. Do not assume nothing was taken, and do not assume a number that was not confirmed.
Schools and staff files
Education files hold identity, contact details, sometimes absences, tutor names and professional phone numbers. That is a map of who works where, who can be reached, and when someone might be away.
Typical misuse: a message to a parent that names the school, a message to a teacher that names a colleague, or a fake HR or payroll notice. The facts make it local. You still should not follow the link.
The data stays useful
Stolen data is cheap to keep. A dump from this year can fuel SMS next winter. Health and school context also tracks life events, a new school year or a public-health campaign, that give scammers a fresh excuse.
Increased caution should not end a week after a notice. Watch for messages that reuse the organisation’s name long after the incident left the news.
Check what these guides taught you. Take the quiz