Malakoff Humanis Confirms Data Leak from IGA Cyberattack

Malakoff Humanis confirmed a data breach affecting 16,556 administrative documents stolen via its management provider IGA. Although the incident was detected and addressed on August 11, the cybercriminal publicly released the files on October 18. The leaked data includes personal identification details, over 800 IBAN entries linked to benefit payments, and health records covering optical, dental, and pharmacy reimbursements. Analyses remain ongoing to determine the exact scope of disclosed elements. The leak poses risks for targeted phishing against opticians and insured individuals, potentially enabling fraudulent requests for IBAN changes or fake regularization emails. Malakoff Humanis stated that regulatory procedures with the CNIL were followed upon detection and warned that advisors will never request passwords or security codes via phone, SMS, or email.