15 million French medical records on the dark web, with patient data sold to the highest bidder. The Cegedim affair took 4 months to make its way out of the regulatory circuit. This is the reality of health data sovereignty in 2026.
At the end of 2025, the software MonLogicielMedical.com, used by 3,800 doctors in France, was compromised. A hacker broke into the system, exfiltrated the data of millions of patients, and put it up for sale on the dark web.
It would take nearly 4 months for the affected doctors to be notified. And the general public only learned of the breach on February 26th, thanks to an investigation by France 2.
Beyond administrative data, information such as doctors’ notes was exposed: HIV status, sexual orientation, addictions, psychiatric disorders... Including data belonging to prominent political figures, who are also reportedly in the database, according to France 2.
And this is not an isolated case. In recent years, around thirty French hospitals have suffered cyberattacks.
The question is no longer whether health data is a target, it is.
But what are we doing to protect it? And this is precisely where the answer is beginning to take shape.
A few months ago, Scaleway was selected to support the Health Data Platform in its transition to a sovereign cloud. A project aimed at strengthening secure access to health data and accelerating its use for research and innovation on a French, auditable infrastructure subject to European law.
Storing and processing health data on a sovereign cloud means reducing exposure to foreign jurisdictions, extraterritorial obligations, and the vulnerabilities created by dependence on players whose decisions and legal obligations we cannot control.
Choosing a sovereign cloud to host health data is a first step. But the path to accessing it must also measure up. France-IX interconnects directly with Scaleway so that sovereignty does not stop at the datacenter door.
Scaleway InterLink
This news was first published on LinkedIn. To comment or share it, head to the original post. → See the post