Leak at MSP Givors Presqu'Île (via Weda)

On 27 November 2025, MSP Givors Presqu'Île — a multidisciplinary health centre (maison de santé pluriprofessionnelle) in Givors, near Lyon — was identified among the structures affected by a data leak stemming from a cyberattack on Weda, the French electronic-health-record provider it uses to manage patient files.

The breach did not originate at the health centre itself. On the night of 10 November 2025, Weda detected abnormal activity on several user accounts. Investigators attributed the intrusion to compromised practitioner credentials, stolen via malware installed on healthcare workers' workstations. The attackers may have been able to extract patient data, though Weda did not formally confirm the full scope of any exfiltration. The incident affected roughly 23,000 of Weda's healthcare professionals nationwide, including those at MSP Givors Presqu'Île.

Data potentially exposed for the centre's patients includes:

• First and last name
• Postal address
• Email address
• Phone number
• Health data (medical records, diagnoses, treatments and results)

As a precaution, Weda cut off access to its platform for several days while it investigated, and notified France's CNIL and ANSSI and filed a criminal complaint. As the data controllers, affected health centres such as MSP Givors Presqu'Île were in turn required to assess the risk and inform their patients. No ransom demand or criminal group's claim was publicly reported at the time, and the extent of any published data for this specific centre remains unconfirmed.