Ehpad 'Les Hortensias'

Ehpad 'Les Hortensias' is a nursing home located in Marigny-le-Lozon, France, providing long-term care and medical support to elderly residents. It operates within the French Ehpad framework, which imposes specific regulatory standards for dependent elderly care. The facility offers services such as 24-hour nursing assistance, medication management, rehabilitation activities, and social engagement programs tailored to seniors with varying levels of dependency. Its primary market is the local population of Marigny-le-Lozon and surrounding communes in the Manche department of Normandy. The organization’s core mission is to ensure the well-being, safety, and dignity of its residents while adhering to national health and social care regulations.

On October 13, 2023, the facility experienced a ransomware attack carried out by the Medusa cybercriminal group. The attackers encrypted systems and demanded a payment of €95,000 to prevent the release of stolen data, which included resident identification documents, medical records, and administrative files. Despite the breach, the nursing home continued to operate without closure, maintaining care services for its residents. Investigations indicated that the intrusion likely began with a phishing email targeting an employee, a tactic frequently used by Medusa. The incident highlighted the vulnerability of healthcare institutions to cyber threats and underscored the importance of robust email security and staff training. While the organization remained functional, the event prompted heightened awareness of data protection needs within the Ehpad sector.