4,000 officers affected by a claimed data leak at Centre National de Gestion (CNG)

On 5 February 2026, the Centre National de Gestion (CNG) — the French public administrative establishment under the Health Ministry that handles the statutory management and HR development of hospital practitioners and public-hospital directors — was named in a claimed data leak. A threat actor published a document said to contain roughly 4,000 lines of data relating to the body's authorising officers (agents ordonnateurs).

According to the claim, the exposed data concerns CNG-linked officers responsible for authorising expenditure and administrative acts. The compromise was disclosed as a claimed leak rather than a confirmed intrusion, and the precise attack vector was not detailed in the available reporting.

The exposed data is reported to include:

• Identifying details of the listed authorising officers
• Administrative records tied to their CNG functions

The leak was reported by the French breach tracker fuitesinfos.fr. As of disclosure, the CNG had not publicly confirmed the incident, and its scope, authenticity, and the response remain unverified.