2026 Cegedim Santé — 15.8M medical records (French health ministry supplier)
Data compromised
Names, DOB, phones, addresses, emails; 165K doctor notes with HIV/AIDS, sexual orientation
Technical writeup
Cegedim Santé, software supplier to France's health ministry, was breached in late 2025. Attacker impersonated civil servant with inter-ministerial access. MonLogicielMedical (MLM) software compromised; ~1,500 of 3,800 doctors affected. 15.8M administrative files stolen; ~165K contained sensitive doctor notes (HIV/AIDS, sexual orientation). Names, DOB, phones, addresses, emails exposed. Extortion letters Oct 27, 2025; disclosed March 2026.
Root cause
Impersonation of civil servant; stolen inter-ministerial credentials