Mutuelle Nationale des Hospitaliers et des professionnels de la santé et du social

Mutuelle Nationale des Hospitaliers et des professionnels de la santé et du social (MNH) is a French mutual organisation that provides health insurance and related social protection services to individuals working in hospitals and the broader health and social sectors. As a mutual, it is owned by its members and operates on a non‑profit basis, aiming to offer complementary coverage that supplements the statutory French health system. The organisation’s membership is limited to hospital staff, health‑care professionals, and social‑service workers, reflecting its specialised focus on these occupational groups. MNH’s services are designed to address the specific needs of its target population, including coverage for medical expenses, disability, and other social benefits. By concentrating on a defined professional constituency, the mutual can tailor its offerings and administrative processes to the realities of hospital and social‑service employment.

MNH is headquartered in France, though the prompt does not disclose further details about its size, membership numbers, or geographic reach beyond the national scope implied by its name. Its distinguishing attributes lie in its sector‑specific mandate, its mutual governance structure, and its role as a regulated entity under French mutual law, which requires transparency and member‑driven decision‑making. The organisation’s operational profile was highlighted in February 2021 when it suffered a ransomware attack attributed to the RansomExx threat actor, prompting the temporary disconnection of its information systems to contain the breach. The incident led to the unavailability of its website, member portals, and telephone platforms, causing delays in processing member requests and public communications. External analysts noted that the attack may have exploited a previously known Citrix/Netscaler vulnerability (CVE‑2019‑19781), although MNH did not confirm the exact initial vector. In response, MNH’s management acknowledged the service disruptions and committed to keeping members informed throughout the recovery process, emphasizing transparent communication as part of its incident‑response approach.