Cnam (Caisse nationale de l’Assurance Maladie)

The accounts of 19 healthcare staff of France’s Caisse Nationale d’assurance Maladie (Cnam) health insurance body were hacked leaking the sensitive information of its patients.

The personal information of about 510,000 people including names, surnames, date of birth, social security numbers, GP details, and levels of reimbursement was accessed by the attackers.

The health care upon learning about the incident immediately filed a complaint and notified the affected individuals.

Source: https://www.connexionfrance.com/article/French-news/French-health-insurance-data-leak-what-to-do-if-you-are-affected

TPRM report: https://scoringcyber.rankiteo.com/company/cnam-caisse-nationale-assurance-maladie

"id": "cna1491522",
"linkid": "cnam-caisse-nationale-assurance-maladie",
"type": "Breach",
"date": "03/2022",
"severity": "80",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 510000,
                        'industry': 'Healthcare',
                        'location': 'France',
                        'name': 'Caisse Nationale d’assurance Maladie (Cnam)',
                        'type': 'Health Insurance Body'}],
 'attack_vector': 'Account Hacking',
 'data_breach': {'data_exfiltration': True,
                 'number_of_records_exposed': 510000,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['names',
                                              'surnames',
                                              'date of birth',
                                              'social security numbers',
                                              'GP details',
                                              'levels of reimbursement']},
 'description': 'The accounts of 19 healthcare staff of France’s Caisse '
                'Nationale d’assurance Maladie (Cnam) health insurance body '
                'were hacked leaking the sensitive information of its '
                'patients. The personal information of about 510,000 people '
                'including names, surnames, date of birth, social security '
                'numbers, GP details, and levels of reimbursement was accessed '
                'by the attackers. The health care upon learning about the '
                'incident immediately filed a complaint and notified the '
                'affected individuals.',
 'impact': {'data_compromised': ['names',
                                 'surnames',
                                 'date of birth',
                                 'social security numbers',
                                 'GP details',
                                 'levels of reimbursement']},
 'response': {'communication_strategy': ['filed a complaint',
                                         'notified the affected individuals'],
              'law_enforcement_notified': True},
 'title': 'Data Breach at Caisse Nationale d’assurance Maladie (Cnam)',
 'type': 'Data Breach'}