The Paris public prosecutor’s office has just opened a preliminary investigation into the violation of personal data from Almerys and Viamedis, these two service providers managing third-party payment for numerous complementary health and mutual insurance companies which have just deplored a hack which could concern a French out of two.
The investigations, opened for breaches of an automated data processing system, fraudulent collection of personal data and concealment, were entrusted to the anti-cybercrime brigade of the Paris police headquarters.
The opening of this preliminary investigation was expected. Almerys had already reported having filed a complaint following the computer hack of which the company was the victim in the second half of January. According to the press release from a mutual insurance company, one of the 84 indirect victims of these computer hacks, “health professionals were targeted to infiltrate the platforms and monopolize data.”
Exact magnitude unclear
The full extent of the data breach remains unclear at this time. If the CNIL press release indicates that the data leak concerns 33 million people, the guardian of personal data clarified to the daily Le Monde that it was only an estimate, which could be revised upwards or downwards. the decline.
According to the CNIL, the compromised data are the first and last name, date of birth, social security number, name of the health insurer as well as the contract guarantees subscribed.
So much information which could, for example, lend credibility to phishing attacks. On the other hand, banking information, medical data, health reimbursements, postal details, telephone numbers or even letters are not affected by this data leak.
Complaint letter
Either way, the number of people affected could be very large. Which justifies the approach of the Cybermalveillance public interest group. It has just set up an electronic complaint letter form on its site. A procedure already well established. The public interest group had already put in place, for example, a complaint letter following the computer attack on the Corbeil-Essonnes hospital in September 2022.
As Cybermalveillance points out, it is first up to the complementary health insurance companies using Almerys and Viamedis to individually inform the people concerned.
Before thinking about filing a complaint, it is better to wait to be notified. Filing a complaint allows you to assert your rights in the event of a trial.