Actor 'Shenron' claims leak of APICRYPT healthcare messaging dataset with 852,757 rows across 60,911 users
An actor using the handle Shenron claims to have released a dataset tied to APICRYPT Messaging, a secure healthcare messaging system created in 1996 and managed by the APICEM association. The listing advertises 852,757 rows covering 60,911 users, and marks the breach and release as occurring in 2026. The visible sample contains healthcare-professional directory and contact information. The download is hidden behind a 5-point requirement. Dark Web Informer has not independently verified the dataset's authenticity, source, counts, sample contents or current availability.
Detalhes técnicos
- Claimed fields: surnames, given names, services, healthcare establishments, postal codes, cities, APICRYPT email addresses, user numbers, street addresses, RPPS identifiers, FINESS identifiers and specialties.
- The method of acquisition is not disclosed, and the material does not establish unauthorized access to APICRYPT systems. The ATT&CK mapping T1213.006 (Data from Information Repositories: Databases) is an analyst inference, not a confirmed behavior.
- No malware hashes, attacker-controlled domains or IPs are visible. The actor's footer states that Matrix, Session, Telegram, Tox and XMPP are not used.
- If authentic, the combination of data could support targeted phishing, impersonation, credential-harvesting attempts or profiling of healthcare professionals and facilities.
Remediação
- The article gives no vendor remediation guidance.
- Defenders in the French healthcare sector should treat the claim as unverified. Consider heightened phishing awareness for healthcare professionals using APICRYPT addresses, and monitor for impersonation attempts that use RPPS or FINESS identifiers.
Linha do tempo
-
Actor 'Shenron' claims leak of APICRYPT healthcare messaging dataset with 852,757 rows across 60,911 users
ler a análise desta fonte ocultar
An actor using the handle Shenron claims to have released a dataset tied to APICRYPT Messaging, a secure healthcare messaging system created in 1996 and managed by the APICEM association. The listing advertises 852,757 rows covering 60,911 users, and marks the breach and release as occurring in 2026. The visible sample contains healthcare-professional directory and contact information. The download is hidden behind a 5-point requirement. Dark Web Informer has not independently verified the dataset's authenticity, source, counts, sample contents or current availability.
Technical Details
- Claimed fields: surnames, given names, services, healthcare establishments, postal codes, cities, APICRYPT email addresses, user numbers, street addresses, RPPS identifiers, FINESS identifiers and specialties.
- The method of acquisition is not disclosed, and the material does not establish unauthorized access to APICRYPT systems. The ATT&CK mapping T1213.006 (Data from Information Repositories: Databases) is an analyst inference, not a confirmed behavior.
- No malware hashes, attacker-controlled domains or IPs are visible. The actor's footer states that Matrix, Session, Telegram, Tox and XMPP are not used.
- If authentic, the combination of data could support targeted phishing, impersonation, credential-harvesting attempts or profiling of healthcare professionals and facilities.
Remediation
- The article gives no vendor remediation guidance.
- Defenders in the French healthcare sector should treat the claim as unverified. Consider heightened phishing awareness for healthcare professionals using APICRYPT addresses, and monitor for impersonation attempts that use RPPS or FINESS identifiers.