Millions of data from patients worldwide have been found online for years, according to a report. In Germany alone, there are about 13,000 records, as the Bayerischer Rundfunk (BR) reports. These are mainly information from people in the Ingolstadt area and Kempen in North Rhine-Westphalia.

Worldwide, 16 million data sets from around 50 countries such as Brazil, Turkey and India are said to have been available unprotected online. They contained almost all personal data such as date of birth, first and last name, appointment of the examination and information about the treating physicians and the treatment itself, as the BR researched in collaboration with the US investigative platform ProPublica. X-rays are also included in the datasets.

According to BR, the data of German patients were available until last week. They came from at least five different locations of servers to which images of MRI tube examinations or computed tomography are sent for archival purposes.

The Federal Commissioner for Data Protection, Ulrich Kelber, warned of possible consequences. "You do not want an employer, an insurance company, a bank knows this data and gives them no contract or loan," said the SPD politician BR.

The Federal Office for Information Security (BSI) has since responded to the vulnerability. According to the investigation, 17 cases were investigated and "three institutions directly informed about the facts", the authorities informed.