CNIL fines Loire Private Hospital €500k for health data breach

Executive Summary

On Sept 3, 2026, CNIL imposed a €500,000 fine on Loire Private Hospital for failing to secure patient data. In summer 2025, an attacker accessed the hospital’s electronic patient record (EPR) system, compromising patient and relative records.


Intelligence Metadata - Source Publisher: DataBreaches.net - Published Date: 2026-09-03T23:45:37+00:00 - Category: data-breaches

Original Description: On September 3, 2026, the CNIL issued a €500,000 fine against the Loire Private Hospital, for not having taken appropriate measures to ensure the security of the data of its patients and some of their relatives. During the summer of 2025, an attacker managed to connect to the electronic patient record (EPR) of the Loire Private... Source

"No pessimist ever discovered the secrets of the stars, or sailed to an uncharted land, or opened a new heaven to the human spirit."

— Helen Keller
Source: DataBreaches.net