St. Luke's Medical Center is currently investigating a data security incident that occurred on its mobile application, potentially compromising the personal information of both patients and employees [1, 2]. While the hospital has stated that the incident did not disrupt its operations, the breach underscores the growing risks associated with digitizing sensitive health data [1]. The incident, detected by the hospital, has prompted an investigation by the National Privacy Commission (NPC) [1]. This involvement signals the seriousness with which data protection authorities are treating such breaches, particularly within the healthcare sector where personal health information is highly sensitive and valuable. The potential exposure of patient and employee data raises significant ethical concerns regarding confidentiality and trust.