major hospitals · France

54% of France's major hospitals are not protected against email spoofing

Public DMARC posture of 52 major hospitals. Edition of June 2026.

5

Protected

19

Enforcing

18

Monitoring only

10

No DMARC

Where each one stands

OrganizationDMARC statusGrade
AP-HMap-hm.frProtected (p=reject)A
AP-HPaphp.frProtected (p=reject)A
CHI de Créteilchicreteil.frProtected (p=reject)A
CHU de Guadeloupechu-guadeloupe.frProtected (p=reject)A
CHU de Montpellierchu-montpellier.frProtected (p=reject)A
CH Annecy Genevoisch-annecygenevois.frEnforcing (p=quarantine)B
CH de Troyesch-troyes.frEnforcing (p=quarantine)B
CH de Valenciennesch-valenciennes.frEnforcing (p=quarantine)B
CH Métropole Savoiech-metropole-savoie.frEnforcing (p=quarantine)C
CHR Metz-Thionvillechr-metz-thionville.frEnforcing (p=quarantine)B
CHRU de Brestchu-brest.frEnforcing (p=quarantine)B
CHRU de Nancychru-nancy.fr(corporate domain : chu-nancy.fr)Enforcing (p=quarantine)C
CHRU de Tourschu-tours.frEnforcing (p=quarantine)D
CHU Amiens-Picardiechu-amiens.frEnforcing (p=quarantine)B
CHU de Besançonchu-besancon.frEnforcing (p=quarantine)C
CHU de Bordeauxchu-bordeaux.frEnforcing (p=quarantine)B
CHU de Clermont-Ferrandchu-clermontferrand.frEnforcing (p=quarantine)B
CHU de La Réunionchu-reunion.frEnforcing (p=quarantine)B
CHU de Limogeschu-limoges.frEnforcing (p=quarantine)B
CHU de Nanteschu-nantes.frEnforcing (p=quarantine)B
CHU de Nicechu-nice.frEnforcing (p=quarantine)B
CHU de Nîmeschu-nimes.frEnforcing (p=quarantine)C
CHU de Rouenchu-rouen.frEnforcing (p=quarantine)B
CHU Grenoble Alpeschu-grenoble.frEnforcing (p=quarantine)B
CH d'Avignonch-avignon.frMonitoring only (p=none)D
CH de Béziersch-beziers.frMonitoring only (p=none)D
CH de Cayennech-cayenne.frMonitoring only (p=none)D
CH de Lensch-lens.frMonitoring only (p=none)D
CH de Perpignanch-perpignan.frMonitoring only (p=none)D
CH de Roubaixch-roubaix.frMonitoring only (p=none)F
CH du Mansch-lemans.frMonitoring only (p=none)D
CHU de Caen Normandiechu-caen.frMonitoring only (p=none)D
CHU de Lillechu-lille.frMonitoring only (p=none)D
CHU de Martiniquechu-martinique.frMonitoring only (p=none)D
CHU de Poitierschu-poitiers.frMonitoring only (p=none)D
CHU de Reimschu-reims.frMonitoring only (p=none)D
CHU de Renneschu-rennes.frMonitoring only (p=none)D
CHU de Saint-Étiennechu-st-etienne.frMonitoring only (p=none)D
CHU de Toulousechu-toulouse.frMonitoring only (p=none)D
CHU Dijon Bourgognechu-dijon.frMonitoring only (p=none)D
Groupe Hospitalier La Rochelle Ré Aunisch-larochelle.frMonitoring only (p=none)D
Hôpitaux Universitaires de Strasbourgchru-strasbourg.frMonitoring only (p=none)D
CH Bretagne Atlantiquech-bretagne-atlantique.frNo DMARCF
CH de Cornouaillech-cornouaille.frNo DMARCF
CH de Mayottechmayotte.frNo DMARCF
CH de Pauch-pau.frNo DMARCF
CH de Saint-Denisch-stdenis.frNo DMARCF
CH de Versaillesch-versailles.frNo DMARCF
CHU d'Angerschu-angers.frNo DMARCF
CHU d'Orléanschu-orleans.frNo DMARCF
Groupe Hospitalier Région Mulhouse Sud-Alsaceghrmsa.frNo DMARCF
Hospices Civils de Lyonchu-lyon.frNo DMARCF

Previous editions

Methodology

We read each organization’s public DNS — the DMARC record on its consumer-facing domain — and classify the published policy (none / quarantine / reject). “Protected” means an enforced p=reject policy. Only public data is used; figures reflect the edition date and can change as records are updated.