15.8 million French health records stolen via supply chain attack on medical software vendors, including HIV status and politicians' health data.

Attackers breached Cegedim Santé, a software vendor used by roughly 1,500 French doctors, and made off with 15.8 million patient records. The stolen data includes 165,000 doctors’ free text clinical notes containing HIV status, personal information, and health details on senior politicians. These were not structured database fields but raw, unfiltered medical notes. The attacker did not breach a hospital or a government system. The target was the vendor. How are healthcare organisations thinking about supply chain risk at the software layer today? 

We cover stories like this weekly – sub here: blog.mailfence.com/newsletter-signup/