Hopital Prive Thiais cybersecurity incidents and threat signals

Nov 23, 2024Use of stolen credentials or exploit

High

Data breach at Hôpital Privé de Thiais, part of Aleo Santé group, exposing patient data

Hôpital Privé de Thiais, a hospital in Val-de-Marne and part of the Aleo Santé group, was affected by a data breach involving unauthorized access to the MediBoard electronic patient record system. This incident, which also impacted other facilities within the Aleo Santé group, resulted in the exposure of sensitive personal and medical data of thousands of patients. The management of Hôpital Privé de Thiais, along with Clinique Alleray-Labrouste, filed a complaint with the CNIL (French data protection authority). The hacker, known as 'nears', claimed to have access to over 1.5 million patient records across multiple French healthcare facilities, with 758,912 patient records from one unnamed hospital offered for sale.