Cyberattack on Eholo Health Exposes Andorran Patient Records

At least one Andorran resident's psychological medical records have been compromised in a cyberattack on Eholo Health, a platform used by health professionals for patient management.

The hackers, who targeted Eholo Wealth—a service offering modules for appointment scheduling, billing, and clinical histories—have released samples proving the breach. Among them is the file of an Andorran patient, though it remains unclear whether the individual received care at a local clinic or elsewhere. Eholo has acknowledged the incident, which exposed data from at least 500 people, primarily in Catalonia and Spain.

Cybersecurity expert Bruno Pérez Juncà, speaking on RAC1, detailed the scale: 601,308 personal identifiers and 1,146,700 medical notes stolen. The attackers are demanding $300,000 by March 15, threatening to sell the data on the dark web otherwise. Victims' information includes names, surnames, addresses, ID documents, visit reasons, therapies, and medical assessments—details ripe for scams or extortion via social engineering.

Eholo serves around 10,000 clients, and Andorran psychology centres use its tools, Altaveu has confirmed. However, neither the Andorran police, the Official College of Psychologists of Andorra (COPSIA), nor the national cybersecurity agency had been notified of any local impact as of Wednesday. The platform operates modularly, so not all users store clinical histories.

The company has filed a complaint with the Mossos d'Esquadra, Catalonia's police force. The full extent of Andorran exposure remains unknown, with authorities yet to comment further.