Cegedim.fr 2026 Data Breach
ObscureIQ Breach Intelligence
High SeverityWebsite / service breach
Cegedim Sante (France) Medical Software Breach (2026): ~15.8 Million Records Including French National IDs, Doctors Notes & HIV/Sexual-Orientation Data Exposed
French technology and data services company serving healthcare and business markets.
Verified by ObscureIQ Intelligence
100/100Breach Risk Index
75Data Value
60Market Recency
127dSince Breach
Breach Intelligence Summary
Entity: Cegedim.fr · Actor: Unknown · Sources: 2 references
Attack: Unknown
Profile: Company · Healthcare data and technology services · SaaS and data solutions provider · Global
Timeline: Breach (2026-02-27) · Indexed (Mar 03, 2026) · Year (2026)
Exposure: 15.8M records · 10 fields: Date of Birth, Email Address, Full Name, Gender, Government ID, Medical Diagnosis, Phone Number, Physical Address, Sexual Orientation, Social Security Number
Status: Confirmed
Executive Summary
Cegedim Sante, the French medical-software subsidiary of the Cegedim group, suffered a major breach affecting roughly 15.8 million records, detected via unusual activity on its MonLogicielMedical (MLM) electronic patient-record product (used by ~3,800 French doctors). After a failed extortion attempt, threat actors marketed the data on dark-web forums and Telegram in early 2026. Exposed data included names, gender, dates of birth, phone numbers, home addresses, emails, French national identification numbers, and, for subsets, doctors' notes and sensitive health conditions such as HIV/AIDS status and sexual orientation (about 165,000 files contained doctors' notes). (NOTE: prior record listed 445,435 email addresses only; this materially understated a ~15.8M-record breach with SSN-equivalent, medical, and special-category data - corrected.)
ObscureIQ assessment: High risk because the company sits inside healthcare data flows at scale. Exposure can enable medical fraud, identity theft, provider impersonation, and sensitive healthcare-data profiling.
Breach Impact
The breach exposed one of the largest volumes of French medical data on record, roughly 15.8 million records, including patient names, dates of birth, contact details, French national identification (Social Security) numbers, doctors' notes, and sensitive health information such as HIV/AIDS status and sexual orientation for some individuals. The combination of identity, national-ID, and special-category health data creates severe identity-theft, medical-fraud, discrimination, extortion, and outing risks at national scale, with major GDPR/regulatory consequences.
About Cegedim.fr
Cegedim, through its subsidiary Cegedim Sante, is a major French health-technology and data-services group that provides medical software to physicians (including the MonLogicielMedical/MLM electronic patient-record product used by thousands of French doctors) and healthcare data/SaaS services. As a health-data processor, it holds large volumes of patient and physician records on behalf of the French healthcare system.
Why They Hold Your Data
Healthcare data and technology providers collect identity, contact, billing, provider, patient, prescription, and workflow data across SaaS, analytics, and healthcare-administration systems.
Recent Developments
Cegedim Sante detected unusual activity on its MonLogicielMedical (MLM) product in late 2025 and filed a criminal complaint. After a failed extortion attempt, threat actors began marketing the stolen dataset on dark-web forums and Telegram in early 2026. French media and authorities reported one of the largest medical data leaks in French history; Cegedim had previously faced GDPR enforcement.
Data Points Exposed
10 verified field types
Date of Birth High
Email Address
Full Name High
Gender
Government ID Critical
Medical Diagnosis Critical
Phone Number
Physical Address High
Sexual Orientation High
Social Security Number Critical
Field names are shown in full for clarity and search visibility. Canonical machine keys are emitted only in this page’s structured data.
Exploitation & Downstream Threats
Threat Activity:Critical
Primary downstream threats:
- Outing, blackmail, and targeted harm from exposure of HIV/AIDS status and sexual orientation
- Identity theft and fraud using French national ID (SSN), name, DOB, and address
- Medical identity fraud and insurance abuse using diagnoses and doctors' notes
- Large-scale targeted phishing/smishing across millions of French patients
- Discrimination risk from disclosure of sensitive health conditions
- Doxxing and physical targeting from exposed addresses
Threat vectors:
- Outing, blackmail & targeted violence
- Full identity theft & synthetic identity fraud
- Medical extortion, insurance fraud & discrimination
- Sensitive-health-status discrimination
- Large-scale phishing & smishing
- Home targeting, stalking & physical threat
Recommended Actions
If you believe your information may be included:
Protect Your ID Documents
Government-ID exposure enables document fraud — monitor and report misuse.
Enable MFA Everywhere
Turn on multi-factor authentication on email first, then financial accounts.
Report & Recover
If you spot misuse, start an official recovery plan and report fraud.
Frequently Asked Questions
What happened in the Cegedim.fr breach?▾
Cegedim Sante, the French medical-software subsidiary of the Cegedim group, suffered a major breach affecting roughly 15.8 million records, detected via unusual activity on its MonLogicielMedical (MLM) electronic patient-record product (used by ~3,800 French doctors). After a failed extortion…
What data was exposed?▾
Verified fields include Date of Birth, Email Address, Full Name, Gender, Government ID, Medical Diagnosis, Phone Number, Physical Address, Sexual Orientation, Social Security Number.
What should I do if I was affected?▾
Change reused passwords, enable MFA, and (if identity or financial data is involved) freeze your credit and monitor your accounts.
Sources & References
Every claim on this page is traceable. This breach draws on:
Breach Index
ObscureIQ Intelligence
ObscureIQ proprietary analysis
Protect Yourself
Check If You're Affected
Enter your email to check whether your data appears in this breach. We’ll send a 6-digit code to confirm it’s your address.
Get Free Breach Alerts
Be the first to know when new breaches are disclosed. Free forever — confirm your email with a 6-digit code.
High-Risk? Get an Exposure Audit
Executives, public figures, and high-visibility operators can receive tailored exposure intelligence and hardening guidance.
Request Consultation