French health third-party payment operator Almerys breached again, beneficiaries' social security numbers exposed

According to franceinfo, French health third-party payment operator Almerys confirmed on May 25 a cyberattack giving unauthorized access to the care-authorization (PEC) site used by health professionals, which was shut down; VIASANTÉ Mutuelle says the intrusion followed the hijacking of a health professional's account ^[1][3]. According to 20 Minutes, potentially exposed data includes names, birth dates, social security numbers, insurer names, contract numbers and coverage dates, while bank, health and contact data and passwords were not affected; La Provence reports 15 million French people are concerned ^[2][4]. VIASANTÉ advises members to be especially vigilant in coming weeks against fraudulent emails, texts or calls posing as insurers or health bodies, never to share credentials or personal data in response to unsolicited messages, and to contact the organisation directly if in doubt ^[3].

Industries mainly affected: Finance, Healthcare