Late 2025 and early 2026 saw a handful of high-profile data breaches in France hit the headlines worldwide for a couple of reasons.
Firstly, the volume: 15-16 million health records and 1.2 million bank accounts were accessed by hackers.
Secondly, the high-profile nature of the breaches: from public services to major telecoms companies.
So, what does this tell us about modern cyber risk?
It’s no longer isolated incidents impacting one sector. Nor can it be predicted.
Let’s take a moment to hit pause and consider what these major events can teach us about our own cyber risks and how to mitigate them.
Cybersecurity risk is systemic
One of the most striking aspects of the French breaches is their breadth – different industries, technologies, and types of attack.
There isn’t one single weakness that connects them, but there is a common factor: increasing organisational complexity.
Before we go any further, let’s understand what actually happened in France.
An explanation of the recent 2025 and 2026 French data breaches
Several major cyber incidents in France between late 2025 and early 2026 affected millions of people and disrupted essential services.
A healthcare breach saw 15m-16m health records accessed
One of the most significant breaches involved software used by healthcare providers.
Attackers gained access to systems used by thousands of doctors, exposing personal and medical information linked to around 15–16 million patients.
Hospitals weren’t directly hacked, but the incident exposes how weaknesses in shared digital platforms can put sensitive data at risk on a national scale.
A postal service breach affected public confidence
France’s national postal service, La Poste, experienced a suspected cyberattack that temporarily disrupted parts of its websites, mobile services, and some connected banking access.
Core postal operations continued, but it showed how cyber events can quickly affect public confidence in public services.
A telecoms breach accessed bank accounts & direct debit details
Meanwhile in the telecoms sector, there was a major breach at mobile provider Free, where bank account data (including IBAN details used for direct debit payments) linked to 1.2 million customers was compromised.
Takeaways from the French cyber attacks
Third-party risk is a major theme
Recent breaches, like the healthcare attack, have involved compromise through suppliers or shared platforms which reflects a broader shift in cyber threat patterns.
It’s fair to say most modern businesses and organisations rely on:
- Software providers
- Data processors
- Managed service partners
- Supply-chain dependencies
This means that even if you’re investing heavily in your own cyber security credentials, you can still remain exposed through third-party dependencies.
So, effective risk management now expands beyond the usual organisational boundaries and into your supply chain and broader network.
Understanding who handles your data, how services are secured, and what assurance exists across the supply chain is no longer optional. At this point, it’s a core leadership responsibility and a non-negotiable for effective information security.
Ransomware and disruption are persistent threats
Another common thread is operational disruption. Cyber incidents are escalating beyond simple data theft and into services outages, external and internal downtime, reputational and financial damage.
Business continuity planning and incident preparedness are therefore as important as preventative controls.
After all, resilience is built not only by reducing the likelihood of attack, but by ensuring organisations can respond calmly and recover effectively when disruption occurs.
Governance and structure matter more than ever
When headlines break, the knee-jerk reaction is often to throw money at new tools and technologies.
And while technology absolutely has a vital role to play, sustainable security comes from something deeper: clear governance and structured risk management.
International standards such as ISO frameworks allow you to:
- Define accountability for security and resilience
- Align controls with real business risks
- Create consistent processes across teams
- Demonstrate assurance to customers and regulators
- Move from reactive firefighting to strategic capability.
In an increasingly complex digital environment, structure provides clarity – which, in turn, builds confidence and supports sustainable growth.
Cyber resilience is a leadership issue
Perhaps the most important lesson from recent events in France is this: cyber resilience is no longer just a technical concern, confined to the IT department.
Quite the opposite, in fact: it’s a board-level business priority that affects every individual and department.
Leaders who treat information security, privacy, and continuity as strategic enablers, rather than compliance exercises, are far, far better positioned to protect trust and maintain momentum in challenging conditions.
So, what should this teach us?
The uproar over the recent French cyber attacks will die down. They probably already have by the time you’re reading this.
However, the underlying risks highlighted by these breaches will continue to shape the operating environment for years to come.
The key takeaway?
The reputational and commercial cost of a significant data breach can far outweigh the effort and resources required to implement strong governance and structured risk management in the first place.
Organisations that take a measured, proactive approach now can:
- Strengthen governance frameworks
- Improve supply-chain assurance
- Maintain customer trust
- Embed resilience into everyday operations
- Respond effectively to disruption
- Support teams with clear processes and realistic expectations
- See sustainable growth.
Risk will always exist. Cyber security has never been about eliminating risk completely. It’s about understanding risk, managing it intelligently, and building organisations that hold steady under pressure.
Organisations like Miro, Seechange, and Typeform trust iso360 to build clear governance, structured risk management processes, and internationally recognised ISO frameworks that strengthen security and resilience over the long term. Contact us for a free consultation about your risk profile.