Hackers claim theft of 436,000 patient records at French pharmacies
A group claims it hit three French pharmacies in Paris, Strasbourg and Dijon within 48 hours and stole more than 436,000 patient records, including social security numbers, prescriptions and health-insurance data. Only the Dijon case is confirmed so far, and hundreds more pharmacies are said to be in the crosshairs. Patients of the affected pharmacies should watch for scams and misuse of their health data.
What happened
A hacker group claims it breached three pharmacies in France, in Paris, Strasbourg and Dijon, within 48 hours, and stole more than 436,000 patient records. The alleged haul includes social security numbers, prescriptions and health-insurance data. Only the Dijon case is confirmed so far.
Why it matters
Health data enables targeted scams, insurance fraud and misuse of social security numbers. The group says hundreds more pharmacies are targeted, widening the risk across the sector. A leak of this kind can trigger patient notification duties and loss of customer trust.
What to do
Check whether the company has any relationship with the affected pharmacies and activate the incident response plan. Notify impacted patients as cases are confirmed. Warn customers to watch for scams using the exposed health data.
For the technical team
- Affected
- Três farmácias na França, em Paris, Estrasburgo e Dijon; base alegada de mais de 436 mil registros de pacientes · Three pharmacies in France, in Paris, Strasbourg and Dijon; alleged haul of more than 436,000 patient records.
- Exploitation
- Breach claimed by a hacker group; only the Dijon case is confirmed so far, according to IntCyberDigest. The group says hundreds more pharmacies are targeted.
- Fix
- No software to update
- More details
- The three pharmacies were reportedly hit within 48 hours. The alleged haul includes social security numbers, prescriptions and health-insurance data.
Timeline
First public claim: group asserts 436,000 patient records from three pharmacies, with only Dijon confirmed.
Sources 1 source
- @IntCyberDigest @IntCyberDigest
