Rofim Doctor
HighReportedHealthcare
A person claims, in a post published on 1 October 2026 on a forum frequented by cybercriminals, to have identified an API belonging to Rofim Doctor, a platform for healthcare professionals, allowing roughly 1.7 million records to be queried; a sample of 1,000 entries was released to support the claim. The fields observed were names, RPPS numbers, professions, specialties, cities, FINESS identifiers and, in some cases, phone numbers. Much of this information is already publicly available in France's official healthcare directory, and no patient data, medical records or passwords were found in the sample. Rofim had not issued any public statement on the incident as of this writing.
- Disclosed on
- October 1, 2026
- Incident dated
- October 1, 2026
- Accounts affected
- 1.7M
- Sector
- Healthcare
- Country
- France
- Cause
- Misconfigured database
Exposed data
- Full name
- Phone number
- Customer ID
- Employment data
You are only affected if you had an account or an order with this organisation.
What you can do
- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.
Sources
Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact