GPS Santé
HighReportedHealthcare
On 1 October 2026, a user of a cybercriminal forum claimed to have stolen a database of about 150,000 records attributed to GPS Santé, a French platform for medical appointment booking and agenda management. According to the author of the claim, access was obtained with a doctor account on a pre-production environment, then through an API. The published sample of about 1,000 records reportedly contains surnames, first names, dates of birth, email addresses, phone numbers and postal addresses, though not every field is filled in for each record. The 150,000 figure refers to records and not necessarily to as many distinct individuals; GPS Santé has not publicly confirmed the claim.
The combination of names, dates of birth and contact details could allow a malicious third party to attempt targeted phishing, social engineering or identity impersonation, if the data is authentic.
- Disclosed on
- October 1, 2026
- Sector
- Healthcare
- Country
- France
- Cause
- Undisclosed
Exposed data
- Full name
- Date of birth
- Email address
- Phone number
- Postal address
You are only affected if you had an account or an order with this organisation.
What you can do
- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.
Sources
Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact