Following a major breach of bank account details, a massive medical data hack in France has exposed the sensitive information of millions of citizens, including high-profile politicians. The leak, which originated from software used by 1,500 medical practices, reportedly includes private doctors' notes regarding patient sexuality and serious illnesses like AIDS.
A massive data breach has hit the French medical sector only a few days after authorities reported a separate hack affecting over a million bank accounts. The France 2 television channel first reported the incident, noting that top politicians are among those whose personal details have been leaked. Much of this stolen information has already been published online, making highly private medical histories accessible to the public.
The French health ministry confirmed that the breach occurred in late 2025 and targeted software developed by the Cegedim Sante company. While the majority of the data involves basic contact information like names and addresses, a significant portion includes personal annotations from physicians. These notes cover sensitive topics, including whether certain patients are homosexual or living with AIDS, sparking deep concerns over privacy and potential discrimination.
Cegedim Sante has filed a criminal complaint and is currently working with authorities to determine the full scope of the incident. The company stated that the breach affected about 1,500 doctors, resulting in the exposure of nearly 16 million administrative files. While the ministry maintains that specific prescriptions and lab results were not compromised, the presence of subjective medical notes for 169,000 patients remains a primary concern for investigators.
Cybersecurity experts have labeled this event as potentially the most significant health sector leak in the history of the country. They warn that unlike financial data, which can be protected by changing account numbers, leaked health diagnoses cause irreparable damage once they are made public. There is no way to retract the information once a patient's medical status is known to the world, creating lasting consequences for those involved.
The incident adds to a growing sense of digital insecurity in France following a separate attack on the national bank database. In that case, a hacker used an official's credentials to view 1.2 million accounts, gaining access to account numbers and holder addresses. The back-to-back nature of these breaches has placed intense pressure on the government to bolster its cybersecurity infrastructure and protect sensitive citizen data from further exploitation.
Source: Hackers Breach French Systems, Stealing Medical Details of 15 Million People