2026 Santé publique France — Cybernox et al. claim; ~80K partner-platform users (unverified)
Data compromised
Actor-claimed ~80,000 people: names, emails, phones, postal addresses, organization affiliation, professional categories (sample). Medical patient dossiers not attested. recordsAffected 80000 — unverified actor/reporter count.
Technical writeup
Unverified leak-site / forum claim — observed August 11, 2026 (Cyberattaque.org; FrenchBreaches). Actors using aliases Cybernox, artemis, and “d'ont call me” claimed they escalated to administrator rights on a platform associated with Santé publique France and used an admin export function to obtain personal and professional data for nearly 80,000 people — primarily partners, professionals, and structures in the health/social sector rather than patient medical records. Screenshots of an admin interface and sample records were circulated. Santé publique France had not issued a matching public confirmation in sources reviewed at indexing. BreachHistory labels the row unverified and indexes recordsAffected 80000 as the actor-cited count.
Root cause
Unverified forum/leak claim: actors Cybernox, artemis, and “d'ont call me” allege privilege escalation to admin on a Santé publique France–associated partner/professional platform with user export — SpF had not confirmed at indexing