[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fDUwqLYVpNk3ajSPlT9-BGwrv9l0XJwJOypqtsaWuYsg":3},{"article":4,"iocs":50},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":27,"category":28,"article_tags":32},"a35fb1c0-c3c0-4b8b-a9f1-ab21fbd247e1","Hacker Claims to Sell 533GB of French and European Healthcare Data and Access","hacker-claims-to-sell-533gb-of-french-and-european-healthcare-data-and-access-408ed6","A threat actor using the alias Zab26 is advertising for sale what they describe as a 533 GB \"full-stack\" healthcare dataset spanning French and European health systems.","A threat actor known as Zab26 is reportedly selling a massive 533GB dataset containing over 115 million rows of personal and health information from French and European healthcare systems. The data allegedly includes medical documents, social security numbers, and patient records. The seller also claims to have live access to systems, including France's national DMP medical-record platform, Kubernetes clusters, and communication channels, raising concerns about ongoing compromise and potential impersonation.","Hacker claims to sell 533GB of French\u002FEU healthcare data and live system access.","Data533 GB \u002F 115M rows PriceFor sale CountryFrance \u002F EU ActorZab26 ▣Post details TargetFrench \u002F European healthcare systems (multiple) CountryFrance \u002F EU SectorHealthcare ClaimHealthcare data + live access for sale Data533 GB, 1.16M files, 115M+ rows ObservedJun 9, 2026 PriceFor sale (full only, PoF required) ActorZab26 !Allegedly exposed 533 GB \u002F 1.16M files (claimed) 115M+ database rows 534,697 PHI \u002F medical documents 479,877 Social Security numbers Patient & health-record identifiers Credentials, tokens & password data Private keys & TLS certificates Claimed live system & DMP access ◱Screenshot Screenshot 1 Redacted preview ⚠Potential impact If even partly genuine, this would be one of the most serious healthcare exposures imaginable: hundreds of thousands of medical and identity documents, nearly 480,000 Social Security numbers, consultation and vaccination records, and over 115 million rows of personal data tied to French and European health systems. The seller also claims live operational access, including a query path to France's national DMP medical-record platform, plus Kubernetes clusters, mail, and Slack, which, if real, would mean an active, ongoing compromise rather than a static leak. The presence of private keys and TLS certificates raises the risk of impersonation and deeper intrusion. These claims are extraordinary and entirely unverified, and sweeping \"everything\" listings are sometimes exaggerated or stitched together from multiple sources. iStatus Unverified The dataset and access are advertised for sale on an underground forum, with samples gated behind a password and contact via XMPP or the forum; the sample data, credentials, contact identifiers, and any specific system details are not reproduced here. Given the extraordinary scope, the claim warrants particular caution. It has not been independently confirmed, and no affected organisation has publicly addressed it. Want the non-redacted screenshots? Paid subscribers get all of the claim details and unredacted screenshots. Check out the threat feed or ransomware feed (whichever applies to this post), then after subscribing, search there for this alert to view the unredacted version. View pricing → DARK WEB INFORMER - THREAT INTELLIGENCE","https:\u002F\u002Fdarkwebinformer.com\u002Fhacker-claims-to-sell-533gb-of-french-and-european-healthcare-data-and-access\u002F","https:\u002F\u002Fstorage.ghost.io\u002Fc\u002F6b\u002F16\u002F6b16ac9c-cd67-432f-b0f3-bbec941084ff\u002Fcontent\u002Fimages\u002F2026\u002F06\u002F273895623768498273649872369873.png","2026-06-10T16:36:06+00:00","2026-06-10T17:00:19.021+00:00",8,[18,21,24],{"name":19,"type":20},"Zab26","threat_actor",{"name":22,"type":23},"DMP","product",{"name":25,"type":26},"Kubernetes","technology","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":27,"icon":29,"name":30,"slug":31},null,"Breaches","breaches",[33,35,40,45],{"category":34},{"id":27,"icon":29,"name":30,"slug":31},{"category":36},{"id":37,"icon":29,"name":38,"slug":39},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":41},{"id":42,"icon":29,"name":43,"slug":44},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":46},{"id":47,"icon":29,"name":48,"slug":49},"c5c77cdb-f7d7-4990-9436-c81dcbff1163","Policy","policy",[51],{"type":52,"value":19,"context":53},"malware","Threat actor alias advertising healthcare data for sale"]