Mutuelle Générale de Prévoyance suffers major data breach

Mutuelle Générale de Prévoyance has confirmed a major data breach following a cyberattack on one of its technical service providers. The intrusion, identified around August 19, has compromised the personal information of approximately 200,000 members.

While the organization states that medical data, reimbursement details, and health information remain unaffected, hackers have claimed to have stolen a significant volume of sensitive data. This includes roughly 198,127 full names, 133,018 IBANs, 45,771 phone numbers, and 24,489 email addresses. The exposure of IBANs poses a high risk of financial fraud and social engineering attacks, where criminals may impersonate the organization to manipulate victims.

Since August 17, affected individuals have been receiving individual notifications regarding the specific data compromised and necessary precautions. The company has filed a formal complaint with judicial authorities, and investigations are ongoing to determine the full scope of the incident and the vulnerabilities within the third-party provider's security systems.