French hospital fined €500,000 after breach exposes data of 727,000

France’s data protection authority, CNIL, fined Hôpital privé de la Loire €500,000 for failing to adequately protect patients’ and their relatives’ data. The breach in summer 2025 exposed sensitive data belonging to 524,867 patients and 202,246 people designated as trusted third parties.