---
title: "Data breach at Centre National de l'Expertise Hospitalière (CNEH)"
description: "CNEH, a French organization supporting healthcare professionals and facilities, is the subject of a cyberattack claim by the Kairos ransomware group, published on September 30, 2026. The attackers claim to hold around 645 GB of data and released samples showing identity documents, French health insu"
canonical: https://inyourgeek.com/en/fuites-de-donnees/2026-09-30-centre-national-de-l-expertise-hospitaliere
type: fuite-de-donnees
author: "Sébastien Soulier"
publisher: "InYourGeek"
language: en
datePublished: 2026-09-30
dateModified: 2026-09-30
---
# Centre National de l'Expertise Hospitalière (CNEH)

Data breach — Critical

CNEH, a French organization supporting healthcare professionals and facilities, is the subject of a cyberattack claim by the Kairos ransomware group, published on September 30, 2026. The attackers claim to hold around 645 GB of data and released samples showing identity documents, French health insurance (Vitale) cards, HR files, CVs, and financial documents, potentially concerning current and former employees, candidates and collaborators. The number of people affected is not quantified, and no official statement from CNEH has been found so far.

The combination of identity documents, health insurance cards and personal contact details exposes affected individuals to a risk of identity theft and administrative fraud.

| Fact | Value |
| --- | --- |
| Disclosed on | September 30, 2026 |
| Sector | Healthcare |
| Country | France |
| Cause | Ransomware |
| Severity | Critical |
| Status | Reported |

## Exposed data

- Email address
- Full name
- Phone number
- Postal address
- Date of birth
- Identity document
- Social security number
- Employment data
- Other personal data

## What you can do

- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- These documents enable identity theft, and cannot be reissued at will. Keep the notification letter: it proves where the leak came from if an account is opened in your name.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.

## Sources

- [Le Centre National de l’Expertise Hospitalière (CNEH)](https://frenchbreaches.com/alertes/le-centre-national-de-l-expertise-hospitali-re-cneh-muome98fga2iaxy1jk) — FrenchBreaches
- [Ransomware.live - Victim: Le Centre National de l'Expertise Hospitalière (CNEH)](https://www.ransomware.live/id/TGUgQ2VudHJlIE5hdGlvbmFsIGRlIGwnRXhwZXJ0aXNlIEhvc3BpdGFsacOocmUgKENORUgpQGthaXJvcw==) — Ransomware.live
- [Le Centre National de l'Expertise Hospitalière](https://hacknotice.com/2026/09/30/le-centre-national-de-lexpertise-hospitaliere/) — HackNotice

_Entry built from the cited sources after a corroboration check, then reviewed before publication._

---

Equivalent HTML page : https://inyourgeek.com/en/fuites-de-donnees/2026-09-30-centre-national-de-l-expertise-hospitaliere
Published by InYourGeek — https://inyourgeek.com/en/a-propos
Method and safeguards : https://inyourgeek.com/en/methode
Full register : https://inyourgeek.com/en/fuites-de-donnees