A computer attack on a French hospital placed the personal data of hundreds of thousands of people in the hands of an attacker. The French data protection authority, CNIL, has now decided to impose a fine of 500 thousand euros on the hospital due to this security breach.
The cyberattack resulted in the exposure of sensitive personal information of a large number of patients. CNIL, responsible for supervising data protection in France, considered that the hospital did not implement adequate security measures to protect user data.
The decision of the French authority serves as a warning to other health institutions about the need to reinforce their cybersecurity systems. This case highlights the vulnerability of personal data in institutions that deal with sensitive health information.
