Health insurance: first name, last name, age… after a piracy, data of more than 500,000 French in kind

Health Insurance has just announced a major date leak after the hacking of several Amelipro accounts. More than 500,000 people are involved in the leak. Here’s what we know about hacking.

This is a massive data leak. The Health Insurance has just communicated this Thursday, March 17, 2022 pe le multi-account piracy Amelipro. The latter are reserved for industry professionals. The detection of these leaks took place last week, since then, investigations have been conducted.

Amelipro accounts compromised

According to the first analyzes of the authority, the hackers were able to access the accounts “not the e-mail addresses were compromised”. There are a total of 19 professional accounts that have been targeted. Once connected to practitioner identifiers, hackers can access Infopacient service. The tool gives access to “certain administrative information of insured persons” using the social security number.

Attackers who develop a script, like a robot, a process for chain requests for retrieve a maximum date.

What data is stolen?

Health Insurance reveals the nature of the data stolen by hackers. So, name, first name, date of birth, gender, social security number and “rights” information (namely according to the administration “declaration of a attending physician, allocation of complementary solidarity health or state medical assistance, possible 100% care”) are currently in the hands of cybercriminals.

Exactly 510,000 policyholders are affected by this large-scale leakage. Ameli stated that the contact and bank details were not involved in the leak. Victims of piracy will be contacted individually and informed about pirated information.

A complaint filed

After identifying the attack, the disease insurance experts proceeded to ban access to the IP addresses of the attacks. Les comptes Amelipro piratés have been reset and a monitoring of “possible identification anomalies” is in place.

corpse professional are invited to strengthen their Amelipro account security. A notification of piracy was sent to the CNIL on March 16, 2022, in accordance with the legislation in force in the field. A “criminal” complaint has been filed, assures l’Assurance maladie.

Leave a Comment