Centre National de l'Expertise Hospitalière (CNEH)
CriticalReportedHealthcare
CNEH, a French organization supporting healthcare professionals and facilities, is the subject of a cyberattack claim by the Kairos ransomware group, published on September 30, 2026. The attackers claim to hold around 645 GB of data and released samples showing identity documents, French health insurance (Vitale) cards, HR files, CVs, and financial documents, potentially concerning current and former employees, candidates and collaborators. The number of people affected is not quantified, and no official statement from CNEH has been found so far.
The combination of identity documents, health insurance cards and personal contact details exposes affected individuals to a risk of identity theft and administrative fraud.
- Disclosed on
- September 30, 2026
- Sector
- Healthcare
- Country
- France
- Cause
- Ransomware
Exposed data
- Email address
- Full name
- Phone number
- Postal address
- Date of birth
- Identity document
- Social security number
- Employment data
- Other personal data
You are only affected if you had an account or an order with this organisation.
What you can do
- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- These documents enable identity theft, and cannot be reissued at will. Keep the notification letter: it proves where the leak came from if an account is opened in your name.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.
Sources
Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact