Published through 2026-11-02 23:51 UTC · Automated cloud publishing.
Malakoff Humanis Confirms Data Breach Linked to IGA Cyberattack
Understand the event
Malakoff Humanis has officially confirmed a data breach resulting from a cyberattack on its management provider, IGA. The incident involved the theft of 16,556 administrative documents. Although the security team detected and addressed the intrusion on August 11, the situation escalated when the cybercriminals publicly released the stolen data. This development follows earlier reports concerning optical reimbursement leaks, with the latest confirmation specifying the scale of the compromised records and the timeline of the initial detection versus the subsequent public exposure. The company acknowledges the breach but has not yet detailed specific measures taken regarding the leaked optical reimbursement information beyond confirming the source of the leak through its third-party provider.
AI-generated from reporting · updated 15 days ago
Reporting timeline
Follow the reporting for different perspectives.
- AcuitéMalakoff Humanis Confirms Data Leak from IGA Cyberattack
Malakoff Humanis confirmed a data breach affecting 16,556 administrative documents stolen via its management provider IGA. Although the incident was detected and addressed on August 11, the cybercriminal publicly released the files on October 18. The leaked data includes personal identification details, over 800 IBAN entries linked to benefit payments, and health records covering optical, dental, and pharmacy reimbursements. Analyses remain ongoing to determine the exact scope of disclosed elements. The leak poses risks for targeted phishing against opticians and insured individuals, potentially enabling fraudulent requests for IBAN changes or fake regularization emails. Malakoff Humanis stated that regulatory procedures with the CNIL were followed upon detection and warned that advisors will never request passwords or security codes via phone, SMS, or email.