> ## Content Index > Fetch the complete content index at: https://darkwebinformer.com/llms.txt > Use this file to discover other available public pages before exploring further. # APICRYPT Dataset Leak Claim Lists 852,757 Records Across 60,911 Healthcare Users - URL: https://darkwebinformer.com/apicrypt-dataset-leak-claim-lists-852-757-records-across-60-911-healthcare-users/ - Published: 2026-10-16T16:34:36.000Z - Updated: 2026-10-16T16:34:36.000Z - Author: Dark Web Informer - Tags: Leaks Data Exposure Report ![France flag](https://flagcdn.com/w20/fr.png)France Healthcare Messaging Professional & Contact Data Download Listing Unverified ## APICRYPT Dataset Leak Claim Lists 852,757 Records Across 60,911 Healthcare Users Claimed rows852,757 Claimed users60,911 Breach year2026 Unlock cost5 points Severity HIGH ### Overview An actor using the handle **"Shenron"** claims to have released a dataset associated with **APICRYPT Messaging**, a secure healthcare messaging system created in 1996 and managed by the APICEM association. The listing advertises **852,757 rows** tied to **60,911 users**. The visible field list includes surnames, given names, services, healthcare establishments, postal codes, cities, APICRYPT email addresses, user numbers, street addresses, RPPS identifiers, FINESS identifiers and specialties. The post marks the breach and release as occurring in **2026**. **The dataset, its source, the stated counts and current availability have not been independently verified.** ### Post details OrganizationAPICRYPT / APICEM Country![France flag](https://flagcdn.com/w20/fr.png)France SectorHealthcare secure messaging Actor"Shenron" Claimed rows852,757 Claimed users60,911 Breach / release year2026 Post date shownOct 16, 2026 at 12:01 PM ### What the post claims - 852,757 rows advertised - 60,911 users advertised - Breach dated to 2026 - Release dated to 2026 - Surname field listed - Given-name field listed - Service field listed - Healthcare-establishment field listed - Postal-code and city fields listed - APICRYPT email-address field listed - User-number field listed - Street-address field listed - RPPS identifier field listed - FINESS identifier field listed - Medical-specialty field listed - Sample records displayed - Hidden download requires 5 points The visible sample contains healthcare-professional directory and contact information. Individual names, email addresses, RPPS numbers, FINESS identifiers and physical addresses shown in the sample are not transcribed in this report. Sponsored [ ![WhiteIntel, dark web exposure monitoring](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/08/whiteintel_io_banner.jpg) ](https://whiteintel.io/?utm%5Fsource=darkwebinformer.com&utm%5Fmedium=referral&utm%5Fcampaign=whiteintel) ### Screenshots [ Screenshot 1Source screenshot ![Listing claiming an APICRYPT data breach with 852,757 rows across 60,911 users, including healthcare professional contact and identifier fields](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/10/apicrypt.png) ](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/10/apicrypt.png) The supplied capture shows the APICRYPT claim, the stated 852,757-row and 60,911-user figures, the listed professional and contact-data fields, sample records and a hidden download area requiring 5 points. ### IOCs & identifiers Identifiers directly visible or supported by the supplied material. These support correlation and do not independently verify the dataset claim. | Type | Identifier | Source | | ------------------------- | ---------------- | ------------ | | Actor handle | Shenron | Screenshot 1 | | Named organization domain | apicrypt\[.\]org | Screenshot 1 | The domain identifies the organization named in the claim, not malicious infrastructure. The actor's footer explicitly states that Matrix, Session, Telegram, Tox and XMPP are not used. No malware hash, attacker-controlled domain or attacker-controlled IP address is visible in the supplied material. Personal and professional identifiers shown in the sample are not included in this table. ### Mapped techniques **Claimed** identifies behavior explicitly described by the actor. **Inferred** identifies an analytical mapping supported by the supplied material. Neither label means the activity has been independently verified. - Collection [T1213.006](https://attack.mitre.org/techniques/T1213/006/) [Data from Information Repositories: Databases](https://attack.mitre.org/techniques/T1213/006/) Inferred The listing presents a structured dataset containing healthcare-professional identity, contact, organizational and professional-registration fields. The supplied material does not disclose how the data was obtained or independently establish unauthorized access to APICRYPT systems. ### Potential impact If authentic, the claimed dataset could expose **healthcare-professional names, APICRYPT email addresses, physical addresses, RPPS identifiers, FINESS identifiers, specialties and workplace information**. The combination could support targeted phishing, impersonation, credential-harvesting attempts or profiling of healthcare professionals and facilities. ### Status Unverified Dark Web Informer has **not independently verified** the dataset's authenticity, source, completeness, 852,757-row count, 60,911-user count, sample contents or current availability. The supplied screenshot documents the listing and visible sample records, not independent confirmation of the underlying dataset. Want everything on this threat? **Paid subscribers** get the full unredacted claim details and more. After subscribing, check out the [threat feed](https://darkwebinformer.com/threat-feed/?utm%5Fsource=alert&utm%5Fmedium=card&utm%5Fcampaign=apicrypt-data-leak-2026-10-16&utm%5Fcontent=threat-feed) and search there for this alert. [View pricing →](https://darkwebinformer.com/pricing?utm%5Fsource=alert&utm%5Fmedium=card&utm%5Fcampaign=apicrypt-data-leak-2026-10-16&utm%5Fcontent=pricing-button) [Dark Web Informer](https://darkwebinformer.com/?utm%5Fsource=alert&utm%5Fmedium=card&utm%5Fcampaign=apicrypt-data-leak-2026-10-16&utm%5Fcontent=footer)