Breaches and incidents
AP-HP (Paris public hospitals): data of 1,015 patients from meal-management software sold on forum
AP-HP says it was informed on 24 Sep 2026 of the sale of data on a cybercriminal forum and “confirms the theft of data from 1,015 patients” from a module...
- Disclosed
- Verification
- Checked against a primary source
What happened
- AP-HP says it was informed on 24 Sep 2026 of the sale of data on a cybercriminal forum and “confirms the theft of data from 1,015 patients” from a module of the meal software used by 23 AP-HP hospitals; identity data (name, first name, birth information) was affected, with no medical, administrative or banking data. (The page shows only an update date of 7 Oct 2026.)
- Root cause: per AP-HP, “a fraudulent intrusion into the online service allowing patients” (to manage meals).
- No attacker named; AP-HP says it is still verifying the forum claims.
- AP-HP filed a complaint the day after the report and notified authorities including the CNIL.