CNIL: Health data breach: €500,000 fine imposed on the Loire Private Hospital

On September 3, 2026, the CNIL issued a €500,000 fine against the Loire Private Hospital, for not having taken appropriate measures to ensure the security of the data of its patients and some of their relatives. During the summer of 2025, an attacker managed to connect to the  electronic patient record (EPR) of the Loire Private…

Source