Data Breach News2 min read
24,063 Iranian Doctor Profiles Scraped from Nobat.ir
By InsecureWeb Team
This report reflects observations of dark web activity. InsecureWeb makes no representations regarding the accuracy of this data.
Data Breach Summary
A dataset containing detailed public profiles of over 24,000 doctors in Iran has been scraped from the appointment booking platform Nobat.ir. Although this is not a traditional data breach involving unauthorized access to private systems, the collected information includes identifiable and professional details about each doctor.
The zip file includes:
- A
Detail.txtfile listing doctors’ names, Medical Education Numbers (MEN), Google Maps office locations, contact numbers, full office addresses, and Instagram profiles. - A
Profilefolder containing profile photos of doctors in.jpgformat.
This collection, likely intended for aggregation or resale purposes, highlights ongoing privacy concerns related to scraping publicly accessible medical directories.
What Was Exposed?
- Doctor Name
- MEN (Medical Education Number)
- Google Maps Office Link
- Phone Numbers (Office, Private)
- Full Office Address
- Instagram Profile (if available)
- Profile Picture
Total Records: 24,063
Where and How?
The data appears to have been collected through web scraping techniques from the public-facing pages of Nobat.ir. While the information may have been publicly accessible, its aggregation into a single downloadable package raises significant ethical and privacy questions, especially given the sensitive nature of healthcare-related data.
Breach History
As of now, Nobat.ir has no publicly reported history of prior data breaches. However, the scraping of this volume of structured data may prompt scrutiny over how such platforms handle data access, rate-limiting, and privacy safeguards to protect professional information from misuse.
Further Action
Although this is not a system breach, Nobat.ir should consider:
- Implementing stricter anti-scraping measures (e.g., CAPTCHA, rate limits, bot detection)
- Informing affected professionals
- Reviewing public exposure policies of user data
- Adding legal disclaimers and terms regarding automated access
What is InsecureWeb?
InsecureWeb is a Dark Web monitoring service that keeps track of recent data breaches and tracks their impact by monitoring the darkest places of the internet.
Our commitment lies in providing top-notch cybersecurity services to our clients. Through continuous monitoring of the dark web and advanced threat detection methodologies, we strive to identify potential breaches promptly, enabling swift response and mitigation efforts. With our state-of-the-art tools and expertise, we prioritize the confidentiality, integrity, and availability of our clients’ data.
