> ## Content Index
> Fetch the complete content index at: https://darkwebinformer.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Hacker Claims to Sell 533GB of French and European Healthcare Data and Access
- URL: https://darkwebinformer.com/hacker-claims-to-sell-533gb-of-french-and-european-healthcare-data-and-access/
- Published: 2026-06-10T16:35:51.000Z
- Updated: 2026-06-10T16:35:51.000Z
- Author: Dark Web Informer
- Tags: Data Breaches

Breach Report ![France flag](https://flagcdn.com/w40/fr.png)France / EU Healthcare 

## Hacker Claims to Sell 533GB of French and European Healthcare Data and Access

A threat actor using the alias **Zab26** is advertising for sale what they describe as a **533 GB "full-stack" healthcare dataset** spanning French and European health systems. The listing claims **1.16 million files**, including over **534,000 protected-health-information documents**, **479,877 Social Security numbers**, more than **115 million database rows**, source code, private keys and TLS certificates, and, most alarmingly, claimed **live access** to health systems, including a query interface to France's **DMP (Dossier Medical Partage)** shared medical-record platform, Kubernetes clusters, Slack, and mail. The claim is **unverified**.

Severity CRITICAL 

Data533 GB / 115M rows

PriceFor sale

Country![France flag](https://flagcdn.com/w40/fr.png)France / EU

ActorZab26

### ▣Post details

TargetFrench / European healthcare systems (multiple)

Country![France flag](https://flagcdn.com/w40/fr.png)France / EU

SectorHealthcare

ClaimHealthcare data + live access for sale

Data533 GB, 1.16M files, 115M+ rows

ObservedJun 9, 2026

PriceFor sale (full only, PoF required)

ActorZab26

### !Allegedly exposed

- 533 GB / 1.16M files (claimed)
- 115M+ database rows
- 534,697 PHI / medical documents
- 479,877 Social Security numbers
- Patient & health-record identifiers
- Credentials, tokens & password data
- Private keys & TLS certificates
- Claimed live system & DMP access

### ◱Screenshot

[ ![France European healthcare alleged data breach Screenshot 1](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/06/273895623768498273649872369872.png) Screenshot 1 Redacted preview ](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/06/273895623768498273649872369872.png) 

### ⚠Potential impact

If even partly genuine, this would be one of the most serious healthcare exposures imaginable: hundreds of thousands of **medical and identity documents**, nearly **480,000 Social Security numbers**, consultation and vaccination records, and over 115 million rows of personal data tied to French and European health systems. The seller also claims **live operational access**, including a query path to France's national **DMP** medical-record platform, plus Kubernetes clusters, mail, and Slack, which, if real, would mean an active, ongoing compromise rather than a static leak. The presence of private keys and TLS certificates raises the risk of impersonation and deeper intrusion. These claims are extraordinary and entirely unverified, and sweeping "everything" listings are sometimes exaggerated or stitched together from multiple sources.

### iStatus

Unverified 

The dataset and access are advertised for sale on an underground forum, with samples gated behind a password and contact via XMPP or the forum; the sample data, credentials, contact identifiers, and any specific system details are not reproduced here. Given the extraordinary scope, the claim warrants particular caution. It has **not been independently confirmed**, and no affected organisation has publicly addressed it.

Want the non-redacted screenshots? **Paid subscribers** get all of the claim details and unredacted screenshots. Check out the [threat feed](https://darkwebinformer.com/threat-feed/) or [ransomware feed](https://darkwebinformer.com/ransomware-feed/) (whichever applies to this post), then after subscribing, search there for this alert to view the unredacted version. [View pricing →](https://darkwebinformer.com/pricing) 

[DARK WEB INFORMER](https://darkwebinformer.com/) \- THREAT INTELLIGENCE