Viamedis

Viamedis operates as a healthcare payment processor based in France. The company facilitates third‑party payment arrangements between healthcare providers, insurers, and patients. Its services enable insured individuals to receive care without upfront payment, with settlements handled directly between the processor and the insurers. Viamedis serves a broad market that includes numerous healthcare professionals and insurance entities across the country. According to the disclosed breach, the processor is linked to 84 affiliated insurers. These insurers collectively cover approximately 20 million insured individuals in France.

The core function of Viamedis involves managing sensitive personal data such as names, birthdates, social security numbers, insurer details, and coverage information. This specialization in handling immutable identifiers positions the organization as a critical intermediary in the French healthcare payment ecosystem. The high resale value of such data makes healthcare payment processors attractive targets for cybercriminals seeking to conduct identity theft or targeted phishing. In February 2024, a phishing‑compromised healthcare professional’s account led to a cyberattack on Viamedis, exposing the data of the 20 million individuals mentioned above. A similar incident affecting another payment operator, Almerys, was reported concurrently, amplifying the risk landscape for millions of additional policyholders. These events underscore the growing threat landscape faced by intermediaries that process healthcare payments and store extensive personal data.