Mon Logiciel Médical Data Breach
The 2025 Mon Logiciel Médical data incident occurred when patient and practice management records from Mon Logiciel Médical (monlogicielmedical.com), a cloud-based EHR solution operated by Cegedim Santé and integrated with France's Ameli health insurance system, were scraped and leaked online in early 2025.
Exposed Data Types
1 sensitive7- Health insurance records
- Email addresses
- Names
- Dates of birth
- Genders
- Phone numbers
- Physical addresses
About This Breach
What information was compromised in the Mon Logiciel Médical incident?
The exposed JSON Lines database export (ameli.jsonl) contains over 19.1 million patient consultation entries. Verified data classes include:
- Patient Demographics: Full names, gender, dates of birth, and associated email addresses.
- Contact & Geographic Identifiers: Landline and mobile phone numbers, physical residential addresses, and postal codes.
- Healthcare & Insurance Metadata: Insurance policy status (Assuré, Enfant), national health insurance affiliation scheme, and consultation visit timestamps.
How many accounts were affected?
Strict RFC 5322 ASCII canonical verification identified and confirmed 151,290 unique valid email addresses across the exposed patient profile records.
Security advisory & personal identity protection
The leak of personal health administrative details and direct contact coordinates creates elevated risks of targeted SMS phishing (smishing) and medical identity fraud. Impacted individuals should:
- Remain vigilant against fraudulent communications masquerading as national health bodies (Ameli/CPAM).
- Never disclose banking credentials or authentication codes via unsolicited phone calls or messages.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
