The accounts of healthcare staff of insurance body l’Assurance Maladie were hacked in a data security incident and had compromised the health data of more than half a million people in France.
The compromised data included the names, surnames, date of birth, social security numbers, GP details, and levels of reimbursement for at least 510,000 people.
Around19 accounts, mainly belonging to pharmacists, were affected after their email addresses were compromised.
Source: https://www.databreaches.net/health-insurance-data-of-more-than-500000-people-stolen-in-france/
TPRM report: https://scoringcyber.rankiteo.com/company/assurance-maladie
"id": "ass133730422",
"linkid": "assurance-maladie",
"type": "Breach",
"date": "03/2022",
"severity": "90",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"
{'affected_entities': [{'customers_affected': '510,000 people',
'industry': 'Healthcare',
'location': 'France',
'name': 'l’Assurance Maladie',
'type': 'Insurance Body'}],
'attack_vector': 'Email Compromise',
'data_breach': {'number_of_records_exposed': '510,000',
'personally_identifiable_information': ['names',
'surnames',
'date of birth',
'social security '
'numbers',
'GP details',
'levels of '
'reimbursement'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personal Information',
'Health Data']},
'description': 'The accounts of healthcare staff of insurance body '
'l’Assurance Maladie were hacked in a data security incident '
'and had compromised the health data of more than half a '
'million people in France.',
'impact': {'data_compromised': ['names',
'surnames',
'date of birth',
'social security numbers',
'GP details',
'levels of reimbursement']},
'initial_access_broker': {'entry_point': 'Email Compromise'},
'title': 'Data Security Incident at l’Assurance Maladie',
'type': 'Data Breach'}