Polyclinique du Cotentin

Polyclinique du Cotentin is a healthcare facility located in France that provides medical services to patients in the Cotentin region. As a polyclinic, it offers a range of outpatient consultations, diagnostic examinations, and treatment options across multiple medical specialties. The organisation serves the local population and may also receive referrals from surrounding areas. Its headquarters are situated in France, anchoring its operations within the national healthcare system. The organisation operates under the alias Polyclinique du Cotentin.

Prior to the November 2023 cyber incident, the clinic had met the regional health security standards applicable to French healthcare providers, indicating a baseline level of compliance with data protection and IT security requirements. When confronted with the Lockbit ransomware attack that encrypted data and exfiltrated patient and staff information, the organisation maintained uninterrupted clinical operations and reported no impact on patient safety or care delivery. It promptly notified regional health authorities, CERT‑Santé, and data protection regulators, filed a police complaint, and engaged its IT provider to restore systems. Affected individuals are being notified of the personal data breach, although no misuse of the compromised data has been confirmed to date. In response, the clinic is implementing additional security enhancements during system reconstruction to strengthen its resilience against evolving cyber threats.