France
FRA
Viamedis health data breach among 33M affected in double hack
France’s data protection authority CNIL confirmed that more than 33 million people were affected by data breaches at third‑party payment operators Viamedis and Almerys in late January–early February 2024. Viamedis reported a cyberattack on 29 January 2024 involving misuse of healthcare professionals’ credentials, exposing PII including names, birth dates, Social Security numbers, insurer details and third‑party payment guarantees. Viamedis temporarily took its portal offline, disrupting complementary third‑party payments for insureds.
90
Estimated severity
90 / 100
92
Source reliability
92 / 100
Approximate Date
29/01/2024
Targeted Company
VIAMEDIS
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
No information
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
France
Affected countries
France
Impacted regions
France · France
Operational Impact
Duration
No information
Financial impact (USD M)
No information
Impact types
Service unavailabilityDownstream customer disruption
Affected sectors
Finance & InsuranceHealthcare & Public Health
Affected departments
No information
Attack Profile
Attack types
Use of stolen credentialsUnauthorized accessData breachData exfiltration
Attributed threat actors
No information
Sources
Incident Sources
cnil.frhttps://www.cnil.fr/fr/violation-de-donnees-de-deux-operateurs-de-tiers-payant-la-cnil-ouvre-une-enquete-et-rappelle-auxlemonde.frhttps://www.lemonde.fr/pixels/article/2024/02/07/piratage-de-viamedis-et-almerys-les-donnees-de-sante-plus-de-33-millions-de-personnes-concernees-selon-la-cnil_6215292_4408996.htmlscworld.comhttps://www.scworld.com/brief/over-33m-impacted-by-viamedis-almerys-breachesnophi.shhttps://nophi.sh/blog/viamedis-almerys-33-millions-francais-exposesblog.ziwit.comhttps://blog.ziwit.com/cyberattaque-massive-les-donnees-de-33-millions-de-francais-exposeessenat.frhttps://www.senat.fr/questions/base/2024/qSEQ241001877.html