How did hackers gain access to over 15 million French patient records?

Question

Accepted Answer

Hackers Accessed Over 15 Million French Patient Records Through Cegedim Sante Software Breach

A significant data breach in France has exposed the administrative details and medical notes of over 15 million individuals, primarily affecting patients who used software provided by Cegedim Sante. The incident, which occurred in late 2025, involved information from approximately 1,500 medical practices. While the breach compromised patient names, phone numbers, and postal addresses, a subset of 169,000 patients had their doctors' notes included, some of which may contain sensitive personal health information.
Breach Involved Cegedim Sante Software

The hack specifically targeted information from medical practices that utilised software developed by Cegedim Sante, a company that provides services to healthcare professionals in France. The health ministry confirmed that the compromised data originated from about 1,500 doctors out of the roughly 3,800 who were users of this particular software. This indicates a widespread impact across a substantial portion of Cegedim Sante's client base.
Compromised Data Included Medical Notes

While the majority of the breach consisted of administrative files, a critical element involved personal annotations made by doctors within their notes. Out of the 15.8 million administrative files affected, 165,000 files contained these doctor-related annotations. Some of these notes are reported to include sensitive information, raising concerns about patient privacy and the potential for irreparable damage once such data is public.
No Prescriptions or Test Results Affected

Despite the severity of the breach, the French health ministry has stated that no prescriptions or results from biological examinations were compromised. This means that while personal identifying information and clinical observations were exposed, direct medical treatment orders and diagnostic test outcomes remained secure. Cegedim Sante has taken steps to address the situation by filing a criminal complaint in October 2025 and pledging full cooperation with authorities.

Reading history

Hide →

This history is cleared when the page is closed.

How did hackers gain access to over 15 million French patient records?

Loading

Was this article helpful?

Helpful

Not helpful

Report an issue

1

0

0

Share with friends