← Alaxione

2026 Alaxione — Angel_Batista 6.8M profiles / 10.1M appointments claim (unverified)

2026 6.8M records affected Share on X

Data compromised

Advertised (unverified): 6,835,489 user profiles + 10.1M appointment rows (~12.8 GB / ~18M lines) — names, contacts, DOB, NIR columns, practitioner IDs, appointment motives/messages, insurance fields, IBAN/BIC columns (fill rates unknown)

Technical writeup

Unverified leak-site / forum claim — August 20, 2026. French Breaches and La Dépêche reported that actor Angel_Batista claimed to have compromised Alaxione, a French medical appointment and practice-management platform, extracting 6,835,489 user profiles and more than 10.1 million appointment records (~12.8 GB). Actor narrative: multi-week access to subdomains, contact with Alaxione ~two days before posting, and exfiltration from a preproduction environment holding a temporary full-database copy. Published schemas list identities, contacts, DOBs, Social Security (NIR) columns, practitioner data, appointment motives/messages, insurance fields, and IBAN/BIC columns — French Breaches notes schema presence ≠ filled values for all 6.8M rows. Alaxione had not issued a public confirmation at indexing. recordsAffected 6835489 = actor user-profile count (unverified).

Root cause

Unverified forum claim — actor Angel_Batista alleges weeks of subdomain access and exfiltration from a preproduction copy of Alaxione’s medical booking database; Alaxione had not confirmed at indexing

References

Breaches you may like