Cybercriminals swipe 15.8M medical records from French doctors ministry

Around 15.8 million administrative files were stolen after attackers breached a software supplier to France's health ministry.

The supplier, Cegedim Santé, confirmed the data was compromised in late 2025. Approximately 165,000 of these files contained notes penned by doctors, which in "very limited cases" contained sensitive information about an individual's medical history.

According to broadcaster France 24, which first reported the news, these medical histories included, in some cases, details of conditions such as HIV/AIDS and individuals' sexual orientations. Top politicians were reportedly among the individuals whose info was extracted.

The attack targeted Cegedim's MonLogicielMedical (MLM) software, which it claims is used by 3,800 doctors across France, 1,500 of whom were affected.

MLM allows patients to check their health records electronically, communicate with their physician, and offers doctors a range of administrative features.

Cegedim confirmed that all the stolen information was contained ...