French Health Data Migration to Sovereign Cloud and Major Data Breaches in 2026

13 May 2026

CybersecurityData LeaksCloud MigrationVulnerabilitiesFranceHealth DataIDORShinyHuntersCanvasEducationSovereign CloudEmail Security

On 23 April 2026, the French government announced that its national health data repository, operational for nearly seven years, will migrate from Microsoft's servers to Scaleway, a sovereign cloud provider owned by French group Iliad. The move aims to reduce dependency on U.S. cloud infrastructure for sensitive health research data. The ANTS (Agence Nationale des Titres Sécurisés) suffered a breach in April 2026 due to an IDOR (Insecure Direct Object Reference) vulnerability, a common web flaw allowing unauthorized access to sensitive databases. A separate incident involved Instructure's educational platform Canvas, where hackers claiming affiliation with ShinyHunters stole 3.65 terabytes of data affecting 275 million individuals across 8,809 schools in four continents, with an ultimatum set for 12 May 2026. European email providers like Proton Mail and Infomaniak remain reliant on U.S.-defined protocols and standards, including those enforced by Google's Gmail, which filters a significant portion of global email traffic.