Cyberattack at Solimut: data of more than one million policyholders potentially exposed

Solimut Mutuelle de France has confirmed that it was the victim of a cyberattack detected Sunday morning. The organization states that it quickly isolated its systems and stopped the intrusion. Its teams are now working to determine precisely what data was accessed or stolen by the hackers.

The mutual insurance company, which has approximately 550,000 members, has not released any figures regarding the extent of the leak. However, the specialized website Frenchbreaches claims that the files claimed by the hacker could contain the information of more than 1,2 million people, a number exceeding the current membership of Solimut.

Bank details and potentially affected salaries

According to Frenchbreaches, the compromised data includes 770,467 bank account details with IBANs and BICs, nearly three million postal addresses, and approximately 1,08 million payroll statements. These figures have not yet been confirmed by Solimut and should therefore be treated with caution during the investigation.

The disclosure of such information would create significant risks of fraud, identity theft, and targeted phishing. The mutual insurance company urges its members to be particularly vigilant regarding calls, emails, or messages from external parties claiming to act on its behalf.

Healthcare professionals are increasingly being targeted.

Solimut reported the attack to the Prudential Control and Resolution Authority and the National Commission for Information Technology and Civil Liberties. The company has committed to directly informing potentially affected individuals once its investigations have determined the exact nature of the files involved.

This attack comes just days after the one suffered by the Mutuelle Générale de Prévoyance (a French mutual insurance company), through one of its service providers. Government agencies, social security organizations, and healthcare providers have been experiencing a surge in incidents since the beginning of the year. Faced with this increase, the government has asked the French National Cybersecurity Agency (ANSSI) to create a new operational unit to accelerate the response to cyberattacks.