AP-HP (Assistance publique – Hôpitaux de Paris)
ModerateReportedHealthcare
AP-HP states that it was alerted on 24 September 2026 to the sale of data taken from its patient meal-ordering service. Its investigations confirmed the theft of data on 1,015 patients, published on a cybercriminal forum, following an intrusion into a module of the SRD Restauration software, published by Dedalus and used in 23 AP-HP hospitals. The data concerned are patients' surnames, first names, birth-related information and internal patient identification numbers. AP-HP specifies that the published material shows no medical data, bank details, email addresses or phone numbers.
These identification details, linked to a hospital stay, could be used for impersonation attempts or targeted fraudulent messages.
- Disclosed on
- October 7, 2026
- Accounts affected
- 1,015
- Sector
- Healthcare
- Country
- France
- Cause
- Undisclosed
Exposed data
- Full name
- Date of birth
- Customer ID
You are only affected if you had an account or an order with this organisation.
What you can do
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.
Sources
Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact