In the world of digital health, the French platform Jinko, dedicated to cancer patients, has just been hit by a large-scale cyberattack. Personal and sensitive data have been stolen, raising questions about the security of online medical information.
The essentials to remember
- Jinko, a support application for cancer patients, has been the victim of a large-scale hacking, affecting the personal and medical data of many users.
- The stolen information includes user accounts, health data, and internal communications, totaling more than 3.7 GB of sensitive data.
- The platform responded by securing its systems, launching an investigation, and alerting the competent authorities to manage this major cybersecurity incident.
Imagine using an app to track your cancer care journey, and overnight, your personal and medical data ends up in the hands of cybercriminals. Unfortunately, this is what happened to Jinko users, a French startup specializing in supporting cancer patients. This unprecedented hacking raises many concerns about the security of medical data.
Jinko hacking: 3.7 GB of data exfiltrated
On September 7, 2026, a user on a cybercriminal forum posted an archive containing 3.7 GB of data stolen from Jinko. This leak includes 85 tables from the application’s Firestore database, totaling more than 883,000 lines of exported data. The information concerns approximately 3,552 user accounts.
The compromised data includes names, birth dates, email addresses, phone numbers, and postal addresses. However, the most sensitive elements are the medical data, which include details on the type of cancer, the stage of the disease, ongoing or past treatments, and medical history.
Jinko’s response to the security incident
Following the disclosure of the hacking, Jinko quickly responded by confirming unauthorized access to its systems. The platform apologized to its users for the compromise of their personal data.
Jinko took immediate measures, including launching an investigation, securing its systems, and directly informing the affected individuals. The company is also collaborating with the competent authorities to fulfill its legal obligations and plans to file a complaint.
Implications for patients and the health sector
Patients affected by this hacking now face increased risks of email or SMS spam. However, the danger goes much further, with the possibility of their medical information being used maliciously.
This hacking is part of a series of similar incidents affecting the health sector in France, highlighting the vulnerability of online medical data. Other companies, like Almerys, have also suffered attacks, emphasizing the need to strengthen security measures in this critical sector.
Protecting patients’ medical data online
In light of the repetition of these incidents, a broader reflection is needed on the protection of online medical data. Health platforms must invest in advanced security technologies to prevent future breaches.
Healthcare professionals and companies must also raise user awareness about protecting their personal information by promoting robust digital security practices. Educating patients about cybersecurity risks is essential to reduce the impact of such attacks.
FAQ on the data breach at Jinko
What data was compromised during the Jinko hacking?
The compromised data includes personal information such as names, email addresses, and phone numbers, as well as sensitive medical information regarding the type of cancer, treatments, and patients’ medical history.
How did Jinko respond to this data breach?
Jinko responded by securing its systems, launching an investigation into the incident, and informing the affected users. The platform is also collaborating with the competent authorities to comply with its legal obligations.
What are the risks for patients whose data has been hacked?
Patients could be exposed to email or SMS spam attempts. Additionally, their medical information could be used maliciously, posing an additional risk to their privacy.
What measures can be taken to strengthen the security of medical data?
Health platforms must invest in advanced security technologies, while healthcare professionals and companies must raise user awareness about protecting their personal information and promote robust digital security practices.
