A French startup named Jinko, which was launched in 2023 to assist cancer patients, is reportedly under investigation after a potential hacking incident. According to FrenchBreaches, a cybersecurity-focused website, a hacker claimed to have published an archive containing the entire database of Jinko’s service on a cybercriminal forum on September 7, 2026. However, Jinko has not confirmed the claim, and the incident remains unverified. The alleged archive is 3.7 gigabytes in size and includes data from 3,552 active accounts. This data includes basic personal information such as names, email addresses, phone numbers, postal addresses, and dates of birth. The hacker also claims to have access to detailed medical records, including the type of cancer, disease stage, presence of metastases, recurrence history, hormone therapy, treatments, medications, and overall medical history. According to the claim, the data includes 1,342 breast cancer cases and hundreds of other cancer-related cases. The breach reportedly involved two Google services: Firestore, a database, and Firebase Storage, a file storage system commonly used by mobile apps. The hacker mentions 85 database tables and 883,178 records being exported, along with 2,626 files, including images, PDFs, audio, and videos. However, the source of the breach—whether due to a flaw in the app, stolen credentials, or misconfigured storage—remains unclear. In addition to medical records, the hacker claims to have access to 20,635 messages from over a thousand conversations, handwritten notes by healthcare professionals, and several hundred exchanges with an AI assistant. This would include the contact details of 142 doctors and 39 other healthcare professionals, with links connecting each patient to their medical team. The founder of FrenchBreaches warned that hackers are increasingly targeting highly sensitive personal data, especially from individuals with serious illnesses like cancer. This incident comes amid a wave of data breaches in France, including the theft of information from 678,000 taxpayers and the hacking of the National Education system. The data at stake here is particularly sensitive, as health information is protected by strict legal safeguards and involves individuals who are already vulnerable due to their medical conditions. In the event of a data breach, cybersecurity experts recommend that individuals change their passwords immediately, use unique and strong passwords, and enable two-factor authentication (2FA) wherever possible. People should also be cautious of suspicious emails, texts, or calls and avoid clicking on unknown links or downloading attachments. If a breach may affect others, it is important to inform contacts and update devices and software to address security issues. Any instances of fraudulent activity should be reported on the Perceval platform, a French government tool for reporting cyber incidents.