France's National Commission on Informatics and Liberty (CNIL) announced that two third-party healthcare payment operators suffered data breaches and that it has opened an investigation [1]. Authorities advised insured individuals to remain vigilant against follow-up scams and phishing attempts [1]. The incident has drawn regulatory scrutiny alongside several other large-scale personal data breaches in France during the same year [1].
Backfill: this event became public on Feb 15, 2024 and we added it on Nov 8, 2026. It is not a new event.
CriticalMonitoringBackfillOfficially confirmed
French CNIL Opens Investigation into Data Breaches at Third-Party Payment Operators Viamedis and Almerys
1 min read
- Disclosed
- Feb 15, 2024
- Published
- Nov 8, 2026
- Last updated
- Nov 11, 2026
- CVSS basis
- Our assessment
- Attack vector
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Finance, Healthcare
What to do nowOur advice
Insured individuals should remain vigilant against follow-up scams and phishing attempts as French regulators investigate the breach [1].
Timeline
- Public disclosure of incident[1]
Technical details
Source-Supported Details
CNIL issued a statement and opened an investigation into the data breaches affecting Viamedis and Almerys. Because both operators process third-party healthcare payment data, the potential impact is widespread. The exact number of affected individuals is subject to CNIL's official text [1].
Source excerpt for verification: "La CNIL a été informée par Viamedis et Almerys de l’attaque informatique dont ils ont été victimes fin janvier. Ces opérateurs, qui assurent la gestion du tiers payant des complémentaires santé, ont vu les données nécessaires à leurs missions être compromises lors de cette violation." [1].
References
Official / primary1
- [1]
“La CNIL a été informée par Viamedis et Almerys de l’attaque informatique dont ils ont été victimes fin janvier. Ces opérateurs, qui assurent la gestion du tiers payant des complémentaires santé, ont vu les données nécessaires à leurs missions être compromises lors de cette violation.”
Corrections
- · confirmation_status: media_reported → official_confirmed未提供理由
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.