Ramsay

The Ramsay group reported an unauthorized access incident where a significant amount of personal data was stolen. The group blocked the intrusion upon detection and launched investigations with its software provider. The compromised data is primarily administrative, with no reported impact on hospital activities or patient care. Ramsay has filed a complaint and notified relevant authorities, including CNIL, CERT Santé, and the regional health agency. Concerned individuals are advised to be cautious about identity theft risks. The hospital director confirmed data leaks but could not quantify the extent. Affected patients discovered the breach through media reports, raising concerns about potential misuse of stolen identity documents. The investigation is ongoing, with the prosecutor's office involved, but no judicial information has been announced yet.

Source: https://www.clubic.com/actualite-572340-un-hacker-revendique-le-vol-de-plus-de-500-000-donnees-de-patients-d-un-hopital-prive-francais.html

TPRM report: https://scoringcyber.rankiteo.com/company/ramsay-health-care

"id": "ram355071125",
"linkid": "ramsay-health-care",
"type": "Breach",
"date": "7/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Hospital',
                        'location': 'France',
                        'name': 'Ramsay Hospital',
                        'type': 'Healthcare'}],
 'data_breach': {'data_exfiltration': 'Yes',
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': 'Personal Data'},
 'date_detected': '2024-07-08',
 'description': "An unauthorized access to Ramsay Hospital's systems resulted "
                'in the theft of a significant amount of personal data, '
                'primarily administrative in nature. The hospital blocked the '
                'intrusion upon detection and launched investigations with its '
                'software vendor. No impact on hospital operations or patient '
                'care was reported. The incident was reported to relevant '
                'authorities, but affected patients have not yet been '
                'notified.',
 'impact': {'data_compromised': ['Personal Data', 'Administrative Data'],
            'identity_theft_risk': 'High'},
 'investigation_status': 'Ongoing',
 'references': [{'date_accessed': '2024-02', 'source': 'Clubic'}],
 'regulatory_compliance': {'regulatory_notifications': ['CNIL',
                                                        'CERT Santé',
                                                        'Agence régionale de '
                                                        'santé']},
 'response': {'communication_strategy': 'Considering Appropriate Communication',
              'containment_measures': 'Blocked Intrusion',
              'incident_response_plan_activated': 'Yes',
              'law_enforcement_notified': 'Yes',
              'third_party_assistance': 'Software Vendor'},
 'title': 'Data Breach at Ramsay Hospital',
 'type': 'Data Breach'}