---
title: "Data breach at Alaxione"
description: "An individual claims, on a specialized forum, to have exfiltrated around 6.8 million user profiles and over 10.1 million appointments from Alaxione, a French medical appointment management platform, by exploiting access to a pre-production environment. The claimed dataset includes identities, contac"
canonical: https://inyourgeek.com/en/fuites-de-donnees/2026-08-20-alaxione
type: fuite-de-donnees
author: "Sébastien Soulier"
publisher: "InYourGeek"
language: en
datePublished: 2026-08-20
dateModified: 2026-08-20
---
# Alaxione

Data breach — Critical

An individual claims, on a specialized forum, to have exfiltrated around 6.8 million user profiles and over 10.1 million appointments from Alaxione, a French medical appointment management platform, by exploiting access to a pre-production environment. The claimed dataset includes identities, contact details, dates of birth, national ID (social security) numbers, healthcare professional data and banking details. Alaxione confirmed an intrusion occurred but states it only affected a test server without real patient data, which screenshots published by the claimant appear to contradict. The exact scope of the compromise remains disputed between the parties.

The combination of identity data, national ID numbers and health information exposes affected individuals to a heightened risk of identity theft and targeted phishing.

| Fact | Value |
| --- | --- |
| Disclosed on | August 20, 2026 |
| Accounts affected | 6.8M |
| Sector | Healthcare |
| Country | France |
| Cause | Misconfigured database |
| Severity | Critical |
| Status | Confirmed |

## Exposed data

- Full name
- Email address
- Phone number
- Postal address
- Date of birth
- Customer ID
- Employment data
- Social security number
- Health data
- Banking data (IBAN, card)

## What you can do

- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- Watch your statements. On any unknown debit, block the card and request a refund — French law (art. L133-18) entitles you to it.
- These documents enable identity theft, and cannot be reissued at will. Keep the notification letter: it proves where the leak came from if an account is opened in your name.
- Health data is “special category” data under the GDPR: a leak opens a right to compensation, and the organisation must notify the DPA within 72 hours.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.

## Sources

- [Point Vision (Alaxione)](https://frenchbreaches.com/alertes/point-vision-alaxione-mu2xkknzvrz0vmolzuf) — FrenchBreaches
- [Alaxione piraté : les données de 6,8 millions de patients revendiquées](https://frenchbreaches.com/alertes/alaxione-mt0ophzmbommap9dya) — FrenchBreaches
- [Cyberattaque : un site médical ciblé, 6,8 millions de personnes concernées](https://actu.orange.fr/france/cyberattaque-un-site-medical-cible-6-8-millions-de-personnes-concernees-magic-CNT000002rqCsI.html) — Orange Actu
- [6,8 millions de comptes de la plateforme e-santé Alaxione seraient compromis dans une nouvelle cyberattaque](https://www.journaldugeek.com/2026/08/29/68-millions-de-profils-de-la-plateforme-e-sante-alaxione-seraient-dans-la-nature/) — Journal du Geek
- [Alaxione piratée, 6,8 millions de dossiers médicalement exposés, enquête en cours](https://atlantico.fr/article/video/donnees-de-sante-6-8-millions-de-personnes-potentiellement-touchees-par-un-piratage-massif) — Atlantico
- [Alaxione : 6,8 millions de patients et plus de 10 millions de rendez-vous revendiqués dans une fuite massive](https://www.cyberattaque.org/alaxione-68-millions-de-patients-et-plus-de-10-millions-de-rendez-vous-revendiques-dans-une-fuite-massive/) — Cyberattaque.org
- [Cyberattaque : 6,8 millions de données médicales volées sur Alaxione](https://stephanelarue.com/cyberattaque-6-8-millions-donnees-medicales-volees-alaxione/) — Stéphane Larue
- [Des millions de données médicales volées à la plateforme privée Alaxione au cours d'une cyberattaque revendiquée](https://www.franceinfo.fr/internet/securite-sur-internet/cyberattaques/des-millions-de-donnees-medicales-volees-a-la-plateforme-privee-alaxione-lors-d-une-cyberattaque-revendiquee_8155325.html) — France Info
- [France : Alaxione, 6ᵉ plateforme médicale visée par un piratage massif en quelques mois](https://lanouvelletribune.info/2026/08/alaxione-6%E1%B5%89-plateforme-medicale-visee-par-un-piratage/) — La Nouvelle Tribune

_Entry built from the cited sources after a corroboration check, then reviewed before publication._

---

Equivalent HTML page : https://inyourgeek.com/en/fuites-de-donnees/2026-08-20-alaxione
Published by InYourGeek — https://inyourgeek.com/en/a-propos
Method and safeguards : https://inyourgeek.com/en/methode
Full register : https://inyourgeek.com/en/fuites-de-donnees