Les Hortensias

Les Hortensias, also known as Ehpad 'Les Hortensias', is a nursing home situated in Marigny‑le‑Lozon, France. As an Établissement d'Hébergement pour Personnes Âgées Dépendantes (Ehpad), it provides residential care for elderly individuals who require assistance with daily living and medical supervision. The facility offers accommodation, meals, nursing care, and support services tailored to the needs of dependent seniors. Its primary mission is to ensure the well‑being and safety of residents while adhering to French regulations governing elder care.

The home’s specialization in long‑term geriatric care places it within the French healthcare sector’s network of publicly regulated Ehpad establishments. It operates under the oversight of regional health authorities, which set standards for staffing, hygiene, and quality of care. The establishment’s profile gained public attention in October 2023 when it became the target of a cyber incident that highlighted vulnerabilities in its information technology environment.

On 13 October 2023, the Medusa ransomware group launched an attack against Les Hortensias, demanding a payment of €95,000 to prevent the further release of stolen data. The intrusion began with a phishing email that compromised an employee’s credentials, allowing the attackers to encrypt files and exfiltrate sensitive information. The stolen material included resident identification documents, medical records, and administrative files, which the group threatened to publish unless the ransom was paid within a short deadline. Despite the breach, the nursing home continued to operate and did not close its services.

The incident underscored the growing risk of ransomware targeting healthcare and social‑care providers, particularly those that may lack robust cybersecurity defenses. While the organization remained operational, the exposure of personal and health data raised concerns about privacy protection for its residents. Information regarding the ownership structure, parent company, or any subsidiaries of Les Hortensias is not disclosed in the available sources, so those details remain unspecified.