France’s data protection authority has handed down a €500,000 ($580,000) fine against a private hospital in Saint-Étienne after a 2025 cyberattack exposed medical and personal data tied to more than 727,000 people. The CNIL announced the penalty against Hôpital Privé de la Loire on September 3, 2026, closing out a year-long investigation into how an…
