Skip to content
Tips? Soon

Around 30,700 Records Allegedly Leaked From France's Hospital Federation FHF

Breach Report France flagFrance Healthcare

Around 30,700 Records Allegedly Leaked From France's Hospital Federation FHF

A threat actor using the alias Saturne has posted what they describe as the database of FHF.fr, the official website of the Fédération Hospitalière de France (French Hospital Federation), which represents public healthcare and medico-social institutions and runs a major job board for the public health sector. The leak reportedly contains 30,728 records dated June 2026 and is being shared for free. Per the post, each record includes a title (civilité), first and last name, direct phone line, email address, and a membership flag. The dataset's scope is unverified.

Data30,728 records
PriceFree leak
CountryFrance flagFrance
ActorSaturne

Post details

TargetFHF.fr (Fédération Hospitalière de France)
CountryFrance flagFrance
SectorHealthcare / Public Sector
ClaimDatabase leaked (30,728 records)
DataNames, direct phones, emails, membership
FreshnessJun 2026
ObservedJun 23, 2026
ActorSaturne

!Allegedly included

  • 30,728 records (claimed)
  • Titles (civilité)
  • First & last names
  • Direct phone lines
  • Email addresses
  • Membership status
  • Public health sector contacts
  • Data dated June 2026

Screenshot

Potential impact

Because the exposed data is professional contact information rather than patient or medical records, the per-record sensitivity is relatively low: it consists of titles, names, direct phone lines, email addresses, and a membership flag for contacts associated with the French Hospital Federation and its public-health job board. The notable risk is that this is effectively a curated list of public-health-sector professionals, which makes the email-and-direct-line pairing valuable for targeted phishing, recruitment scams, and social engineering aimed at healthcare institutions, a sector that is itself a frequent target of attacks. No passwords, patient data, home addresses, or financial information are referenced. The scope and authenticity are unconfirmed.

iStatus

Unverified

A sample and a download were posted to a forum behind a reply-gate, with the sample rows and the poster's contact handle already redacted in the shared screenshots; the sample records and any contact details are not reproduced here. The actor describes the data as a free leak of the website's database. The claim has not been independently confirmed and the FHF has not publicly addressed it.

Want the non-redacted screenshots? Paid subscribers get all of the claim details and unredacted screenshots. Check out the threat feed or ransomware feed (whichever applies to this post), then after subscribing, search there for this alert to view the unredacted version. View pricing →

DARK WEB INFORMER - THREAT INTELLIGENCE

Latest