Cyber Incident Victim: Assurance Maladie
Date:
Mar 2022
Location:
France
Summary
A major health insurance data breach in France compromised sensitive information of over 510,000 individuals after attackers accessed 19 healthcare worker accounts, primarily belonging to pharmacists, through compromised email credentials. The stolen data from the organization included victims' full names, birth dates, social security numbers, general practitioner details, and reimbursement levels, exposing them to potential identity theft and fraud risks. This incident stemmed from unauthorized access to internal systems via compromised professional accounts within the healthcare sector.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On or around March 18, 2022, France's health insurance agency Assurance Maladie suffered a data breach compromising sensitive information belonging to over 510,000 individuals. Attackers gained unauthorized access to 19 professional accounts primarily affiliated with pharmacists by exploiting compromised email credentials. This access enabled the theft of personally identifiable information and health-related data, including full names, dates of birth, social security numbers, assigned general practitioner details, and reimbursement levels for medical expenses. The breach did not involve direct infiltration of Assurance Maladie's core systems but rather leveraged compromised credentials of authorized healthcare personnel to extract data through legitimate channels. No technical details regarding the initial email compromise vector or intrusion timeline were disclosed in available reports.
The incident exposed highly sensitive information that could facilitate identity theft, insurance fraud, and targeted phishing campaigns against affected individuals. Assurance Maladie publicly confirmed the breach on the disclosure date but did not specify containment measures, forensic findings, or remediation steps taken to secure compromised accounts. Impacted individuals faced elevated risks due to the combination of national identification numbers and healthcare details, which are particularly valuable for criminal exploitation in France's centralized health administration system. The scale of the breach exceeded half a million victims, making it one of the largest healthcare data incidents reported in France during early 2022. No ransomware deployment, financial theft, or additional attacker motives beyond data exfiltration were documented in the primary source material.