Security Firm Assessed Star Health Executive-Involvement Material as Unproven

Alongside the Star Health data, the party distributing it published material — including purported screenshots and conversations — said to show that a named senior employee had sold the records.

The accusation was widely repeated. A security research firm that examined the published material assessed the data itself as authentic with high confidence, and separately assessed the evidence implicating the executive as fabricated.

Authentic data does not authenticate the story told about it. An attacker holding real records can attach any account of how they were obtained, and the records will check out while the account does not.

This corpus grades attacker claims low as a matter of routine. It has not previously had to record an attacker manufacturing evidence against a specific person, and that is a materially worse thing than inflating a volume figure.

This desk names individuals after conviction, not after arrest — the standard set at 25-0724 and applied at 25-0222, 24-1030 and, in the other direction, at 24-0910 where two people had been convicted and were named.

An accusation from an attacker sits far below an arrest. There is no charge, no court, no process, and an assessment that the supporting material was manufactured. Printing the name would spread an allegation whose only source is a party with an obvious motive to make it.

The name is easily found elsewhere. That is not a reason to repeat it; it is the situation the rule exists for.

This desk does not know and will not speculate about motive in a specific case. Structurally, an insider story shifts blame from the organisation’s controls to one person, complicates the victim’s response, and makes a leak more newsworthy.

What the corpus can record is the consequence: a person was publicly accused of a serious offence on evidence that examination suggests was made up, in a story that reached international coverage.

The grade attaches to what is established. What is established is that an accusation was made and that one firm assessed its supporting material as fabricated. This desk has not examined the material, cannot verify the assessment, and records neither the accusation nor its rebuttal as settled.

The corpus filed at 25-1114 that the grade is sometimes the most important thing in a file. This is one of those, and the practical instruction is simpler than the grade: do not repeat an attacker’s accusation against a named person.