33 million French people affected by hacking of social security numbers: the CNIL calls for vigilance

33 millions de personnes sont concernées par le piratage d'opérateurs de tiers payants. MAXPPP – Luc Nobout

Ce mercredi 7 février 2024, la CNIL indique le nombre de personnes concernées par le piratage de Viamedis et d'Amerys, deux spécialistes du tiers payant.

33 million. This is the number of people affected after the hacking of social security numbers of which Viadémis and Almerys, two third-party payment operators, were victims at the beginning of February. The National Commission for Information Technology and Liberties (CNIL) officially communicated this Wednesday, January 7, reports BFMTV.

Ongoing investigations

"The CNIL is carrying out investigations into the  data breach  which affected the operators Viamedis and Almerys, two operators managing third-party payment for numerous complementary health and mutual insurance companies. With more than 33 million people affected, it recalls some advice to apply", we can read on the Commission's website.

🔍 La CNIL mène des investigations sur la violation de #données ayant affecté Viamedis et Almerys, deux opérateurs assurant la gestion du tiers payant pour de nombreuses complémentaires #santé.
Comment savoir si vous êtes concernés et que faire ? 👉 https://t.co/HWVw1LWqTQ pic.twitter.com/UhBShKAVaJ

— CNIL (@CNIL) February 7, 2024

This publication is therefore aimed at potential victims, who have had their social security number hacked. "The data concerned is , for the insured and their family, marital status, date of birth and social security number, name of the health insurer as well as the guarantees of the contract subscribed", declares the CNIL.

People affected by this data hack should be informed by complementary health insurance customers of Viamedis and Almerys, explains the news channel. The CNIL calls for the greatest vigilance and indicates on site the advice to follow to avoid any problems.

The consequences of this data theft can result in a high risk of phishing or even unusual movements on different accounts. For the moment, the Commission continues to investigate in order to "determine in particular whether the security measures implemented prior to the incident and in response to this were appropriate with regard to the obligations of the GDPR".