Orkyn'
CriticalConfirmedHealthcare
Orkyn', a home healthcare provider, detected unauthorized access to a file containing patient data on 19 September 2026 and suspended access to its online portal 'Orkyn' & moi'. The company confirmed the compromise of identity data (name, date of birth), contact details, social security numbers, and information related to medical follow-up and billing to the French health insurance system. On 1 October 2026, a post on a cybercriminal forum claimed to be distributing a database of roughly 18,000 records consistent with these categories, a figure Orkyn' has not confirmed.
The combination of identity data, contact details, social security numbers and medical information exposes affected individuals to a heightened risk of targeted phishing and identity theft.
- Disclosed on
- October 1, 2026
- Incident dated
- September 19, 2026
- Sector
- Healthcare
- Country
- France
- Cause
- Undisclosed
Exposed data
- Full name
- Email address
- Phone number
- Postal address
- Date of birth
- Customer ID
- Social security number
- Health data
You are only affected if you had an account or an order with this organisation.
What you can do
- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- These documents enable identity theft, and cannot be reissued at will. Keep the notification letter: it proves where the leak came from if an account is opened in your name.
- Health data is “special category” data under the GDPR: a leak opens a right to compensation, and the organisation must notify the DPA within 72 hours.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.
Sources
Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact