Cyberattack on French health supplier exposes 15.8 million records

A cyberattack targeting a software supplier for France's health ministry has compromised 15.8 million patient administrative files The supplier, Cegedim Santé, confirmed the data was stolen in late 2025 after a breach of its MonLogicielMedical (MLM) software The attack directly affected 1,500 of the 3,800 doctors across France who use the platform

The compromised information primarily consists of administrative files. However, approximately 165,000 of these records also contained free-text notes written by doctors According to a media report on the incident, these notes contained sensitive medical information in "very limited cases," including details about conditions such as HIV/AIDS and individuals' sexual orientations The same report indicated that top politicians were among those whose information was extracted in the breach The full scope of the exposed medical details and the identity of the attackers remain under investigation.