Les Laboratoires Français Cerballiance

Cerballiance, also known as Les Laboratoires Français Cerballiance, is a French organization that operates laboratories. These laboratories maintain both medical records and patient administrative data. The administrative data comprises names, dates of birth, postal addresses, telephone numbers, email addresses and social security numbers. In addition, the data includes information on the patient’s insurance regime, cash centre, end‑of‑rights dates and mutual insurer details. Cerballiance’s core function is the collection, storage and management of this information.

The organization’s operational footprint includes laboratories located in the Provence‑Alpes‑Côte d'Azur (PACA) region of France, as shown by the cyberattack that affected its PACA‑based facilities in February 2025. During that incident, unauthorized access was gained to a server holding the administrative data, while medical records were reported as unaffected. Following the breach, Cerballiance notified the national cybersecurity agency, the data protection authority, the digital health agency and the regional health authority. The company stated that it had identified and neutralized the source of the breach, launched an investigation to determine the exact scope, and made a dedicated telephone line and email address available for affected individuals. These actions place Cerballiance under the regulatory oversight of data protection (GDPR) and health‑specific authorities that govern the confidentiality and security of personal health information.