In June 2025, a group of hackers known as "Marak" breached the computer systems of the Private Hospital of the Loire, which is part of the larger Ramsay Santé healthcare network. The hackers stole over 530,000 patient records and 45,000 copies of identity cards. They issued a threat to either leak or sell the stolen data unless the hospital contacted them within 72 hours. During this time, François Cardona, a journalist with "Cash Investigation," spoke with one of the hackers through an encrypted messaging platform. The hacker claimed to have gained access using a doctor’s login credentials and remained hidden in the Ramsay network for over three days, copying data at a high rate. The hacker also shared evidence of the breach, including some of the stolen patient records and identity cards. Ramsay Santé stated that the majority of the stolen data were administrative in nature, with only "forty patients" affected by more sensitive information. However, this number cannot be independently confirmed. The breach highlighted serious security vulnerabilities, as the hospital was fined 500,000 euros by the French data protection authority, CNIL, in September 2026 for failing to implement basic security measures. This fine underscored the importance of data protection in the healthcare sector, where personal and medical information is particularly sensitive. The "Marak" group was eventually dismantled by the U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC), which is responsible for enforcing economic and trade sanctions. Between March and July 2026, seven members of the group, all aged between 16 and 22, were arrested. Their capture marked the end of a significant cybercrime operation that had exposed weaknesses in one of France’s largest private healthcare networks. The incident serves as a reminder of the ongoing threats posed by cybercriminals and the need for stronger digital security protocols in critical sectors like healthcare.