Cyberattack at French hospital exposes health data of 750,000 patients

A threat actor known as 'nears' claimed to have breached MediBoard accounts used by multiple French healthcare facilities (all belonging to Aléo Santé) and posted ~758,912 patient records for sale. The exposed data includes names, DOBs, contact details, physicians, prescriptions and health history; Softway Medical Group states the breach resulted from stolen privileged credentials within the client environment, not a software vulnerability, and the sale increases risks of phishing, fraud, and wider data leakage.