Over 103K Vivalto Santé group hospitals’ patients exposed, hackers claim

Attackers claim they’ve penetrated the Hôpital Privé de la Miotte in France, stealing sensitive personal details, including patients’ home addresses.

The supposedly stolen data was taken from the hospital vaccination center in Belfort, an eastern French town. The hospital is part of Vivalto Santé, one of the largest private clinic groups in the country.

We’ve reached out to Hôpital Privé de la Miotte for comment and will update the article once we receive a reply.

The threat actors announced the hack on a popular data leak forum often used to sell and leak stolen personal data. They claim to have obtained information on over 103,000 individuals.

The Cybernews research team investigated data samples provided in the attackers‘ post, concluding that the details appear to be legitimate. According to the team, the exposed data includes:

• Full names
• Dates of birth
• Phone numbers
• Email addresses
• Home addresses

Our researchers believe that exposing personal details hampers individuals‘ privacy, opening them up to identity theft and phishing attacks. Attackers could try to craft tailor-made intrusions, developing healthcare scams and social engineering attacks. For example, cybercriminals could impersonate medical staff to extract additional details from unsuspecting victims.

Hôpital Privé de la Miotte is one of the nearly 100 healthcare facilities Vivalto Santé operates across Europe. The healthcare group has over 7,200 beds and over 10,000 in France alone, generating over $2 billion in revenue.