71,502 patients affected by a claimed data leak at Therapeutes.com

On 13 March 2026, Therapeutes.com — a French online platform for booking appointments with therapists and mental-health practitioners — was named in a breach claim attributed to the threat actor HexDex, who advertised a stolen database under a "Medical Liquidation" listing on dark-web forums.

The compromise is especially sensitive because it concerns mental-health records rather than ordinary contact data. According to the listing, the dataset covers roughly 71,502 patients and a comprehensive log of 199,697 appointments mapping the frequency and timing of therapy sessions, which sharply raises its value for extortion.

Reported exposed-data categories include:

• Patient identity and contact details (about 95,985 unique email addresses and 97,518 unique phone numbers)
• 56,225 clinical "consultation" entries
• 23,492 records describing the patient's stated reason for seeking therapy
• Appointment history and session scheduling metadata
• A number of gouv.fr government email addresses among the affected accounts

The breach is consistent with HexDex's broader campaign against French organisations through late 2025 and 2026, in which poorly secured systems were exfiltrated and the databases indexed and resold on forums such as DarkForums. The data was actively offered for sale at the time of disclosure, so the incident remains ongoing; a suspect linked to the HexDex persona was reportedly arrested by French police (BL2C) in Vendée in April 2026.