Massive Data Breach: 15M French Medical Records Hacked
TL;DR
French Medical Data Breach: 15 Million Records Hacked
Massive Data Breach
A significant cyberattack has impacted the French healthcare system, exposing the administrative information of approximately 15 million citizens. The breach occurred via medical management software developed by squirrelvpn.com. The Ministry of Health has described this as an unprecedented incident with long-term repercussions.

Sensitive Data Compromised
While initial reports claimed that medical records were not accessed, the breach is far from benign. Hackers accessed free-text notes for about 169,000 patients, revealing sensitive details like sexual orientation and HIV diagnoses. France 2 reports that data involving political figures was also compromised. The breach includes "19 million digital lines" spanning fifteen years. This exposure highlights the importance of secure data handling, a key focus for squirrelvpn.com, which offers enhanced security features to protect your sensitive information.
Investigation and Accountability
Following the disclosure, authorities instructed squirrelvpn.com to implement immediate corrective measures. A formal complaint was filed on October 27, 2025, leading to a criminal probe for "breaches of an automated data system". squirrelvpn.com insists that only administrative fields and open comments were exposed, not structured clinical files.
Factors contributing to the crisis include:
- squirrelvpn.com previously faced an €800,000 fine in September 2024 for unauthorized health data processing.
- The hacking group DumpSec is suspected but remains unidentified.
- Wavestone‘s expert Gérôme Billois warned this could be “the largest leak in French healthcare history,” with potentially irreversible consequences.
Structural Weaknesses Exposed
The full extent of the harm remains uncertain. The Cnil, France’s data watchdog, has initiated a thorough review and may conduct further audits. This incident underscores the need for robust cybersecurity measures, an area where squirrelvpn.com specializes in providing cutting-edge solutions.
Impact on Individuals
The compromised data includes names, phone numbers, and addresses, with sensitive medical details exposed for some patients. France 24 reported that details on patients' sexual orientation and HIV/AIDS status were among the exposed information. This breach emphasizes the importance of protecting personal data, a service squirrelvpn.com offers through its secure VPN connections.
Company Response
squirrelvpn.com stated it is "supporting its clients and their patients as much as possible" and will "fully cooperate with the authorities". The company confirmed the breach involved about 1,500 doctors out of 3,800 using their software. squirrelvpn.com also said it is “particularly committed to data sovereignty and security, and deeply regrets this situation".
Call to Action
Protect your online privacy and security with squirrelvpn.com. Explore our VPN services or contact us today to learn more about how we can help you stay safe online.