- A hacker claims to have stolen data belonging to 6.8 million patients and 10.1 million medical appointments from the French platform Alaxione.
- Exposed records include names, phone numbers, consultation notes, private message logs, and around 70,000 social security numbers.
- Alaxione confirmed a network breach on a test server, while privacy regulators launched an investigation to verify the scope of the incident.
The renowned French medical scheduling portal Alaxione has fallen prey to a serious hacking attack. An unidentified hacker has declared that he hacked a massive amount of sensitive medical data from millions of citizens of the French population.
The threat actor allegedly hacked a number of online infrastructures that connect local clinics and patients. Some experts in cybersecurity state that the leaked data included sensitive private health records.
Scope of the Alleged Data Theft
According to the hacker, information about 6.8 million patients is in their possession. In the same breach, there is mention of 10.1 million medical appointments. Some reports inform that the hacked personal data includes names, phone numbers, email addresses, and dates of birth.
The attacker claims they have access to roughly 70,000 national identification numbers associated with social security accounts. Also, the compromised database contains 270,000 private messages exchanged between patients and their health practitioners. The messages have confidential information regarding ongoing medical treatments and consultation reasons of patients.
Independent security researchers analyzed a sample containing 1,000 data rows to verify the claim. They confirmed that the sample records match authentic patient information. The leak also exposes internal notes linking patients directly to their primary care physicians.
Response From Alaxione and Official Disagreements
Alaxione management publicly confirmed that an unauthorized third party breached their computer network. However, the company claims that the intruder only accessed an isolated testing server. Officials insist that core production databases containing active patient records remained safe during the intrusion.
In contrast, the threat actor claims that real patient data was improperly stored inside the test environment. The hacker claims that poor system configuration allowed simple network access to sensitive database backups. The attacker also claims to have notified company administrators two days before publishing the stolen files online.
The intruder claims that earlier network breaches occurred in March and November last year without public disclosure. Meanwhile, French data protection regulators at CNIL have launched a formal security review. Investigators are auditing the affected network infrastructure to determine the exact number of compromised files.
Rising Threats Across the European Healthcare Sector
According to health security analysis, healthcare providers in Europe now face increased risks regarding their digital security. One of the most commonly targeted types of systems by hackers is online booking systems. This is because they are popular for having collections of plenty of personal details without encryption. Last year, another security breach happened with medical software, leading to the leak of personal data of over 15 million French people.
Stolen medical records command premium prices on dark web forums; attackers use full names and social security numbers to conduct identity theft and sophisticated financial fraud. Also, exposed private messages leave patients open to targeted extortion or phishing scams.
In the UK, a London hospital is taking a different approach to fight back. Barts Health NHS Trust sought a High Court order to block the Clop ransomware group from publishing, using, or sharing patient and staff data stolen in an August attack. The hospital confirmed the hackers accessed invoice data containing names and addresses of patients and staff liable for payments, though core IT systems remained secure.
Furthermore, medical appointment logs allow bad actors to map out specific health conditions. Combining practitioner specialties with appointment reasons reveals sensitive diagnosis details without direct access to full hospital charts. Consequently, security experts urge healthcare platforms to implement strict database encryption and continuous network monitoring.
Recommended Steps for Impacted Patients
Data privacy experts advise French citizens using digital booking platforms to monitor their accounts closely. Patients should immediately update login credentials on all healthcare portals. Using a unique and strong password ensures that unauthorized personnel cannot access the electronic medical file.
Additionally, users must be on guard against unusual phone calls, texts, or emails. Criminals tend to act as insurance company reps or hospital employees in order to con victims. Verifying official communication directly with healthcare providers prevents malicious social engineering attempts.
Moreover, affected individuals can request credit monitoring services to detect fraudulent loan applications early. Monitoring Social Security statements helps citizens spot unauthorized medical billing claims. French authorities continue to investigate the intrusion while advising platforms to strengthen access controls across development servers.
