---
title: "Data breach at Orkyn'"
description: "Orkyn', a home healthcare provider, detected unauthorized access to a file containing patient data on 19 September 2026 and suspended access to its online portal 'Orkyn' & moi'. The company confirmed the compromise of identity data (name, date of birth), contact details, social security numbers, and"
canonical: https://inyourgeek.com/en/fuites-de-donnees/2026-10-01-orkyn
type: fuite-de-donnees
author: "Sébastien Soulier"
publisher: "InYourGeek"
language: en
datePublished: 2026-10-01
dateModified: 2026-10-01
---
# Orkyn'

Data breach — Critical

Orkyn', a home healthcare provider, detected unauthorized access to a file containing patient data on 19 September 2026 and suspended access to its online portal 'Orkyn' & moi'. The company confirmed the compromise of identity data (name, date of birth), contact details, social security numbers, and information related to medical follow-up and billing to the French health insurance system. On 1 October 2026, a post on a cybercriminal forum claimed to be distributing a database of roughly 18,000 records consistent with these categories, a figure Orkyn' has not confirmed.

The combination of identity data, contact details, social security numbers and medical information exposes affected individuals to a heightened risk of targeted phishing and identity theft.

| Fact | Value |
| --- | --- |
| Disclosed on | October 1, 2026 |
| Incident dated | September 19, 2026 |
| Sector | Healthcare |
| Country | France |
| Cause | Undisclosed |
| Severity | Critical |
| Status | Confirmed |

## Exposed data

- Full name
- Email address
- Phone number
- Postal address
- Date of birth
- Customer ID
- Social security number
- Health data

## What you can do

- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- These documents enable identity theft, and cannot be reissued at will. Keep the notification letter: it proves where the leak came from if an account is opened in your name.
- Health data is “special category” data under the GDPR: a leak opens a right to compensation, and the organisation must notify the DPA within 72 hours.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.

## Sources

- [Orkyn](https://frenchbreaches.com/alertes/orkyn-mupff8p55spyc9k49rw) — FrenchBreaches
- [Orkyn : cyberattaque et fuite de données chez le prestataire à domicile](https://fuitesinfos.fr/article/2026-10-01-orkyn) — Fuites Infos
- [Orkyn : les données de santé de patients volés après une cyberattaque](https://www.cyberattaque.org/orkyn-les-donnees-de-sante-de-patients-voles-apres-une-cyberattaque/) — Cyberattaque.org
- [[FR] Orkyn](https://hacknotice.com/2026/10/01/fr-orkyn/) — HackNotice

_Entry built from the cited sources after a corroboration check, then reviewed before publication._

---

Equivalent HTML page : https://inyourgeek.com/en/fuites-de-donnees/2026-10-01-orkyn
Published by InYourGeek — https://inyourgeek.com/en/a-propos
Method and safeguards : https://inyourgeek.com/en/methode
Full register : https://inyourgeek.com/en/fuites-de-donnees