Solimut Mutuelle de France hit by major cyberattack

Solimut Mutuelle de France has confirmed it was the victim of a cyberattack detected on a Sunday morning. While the organization has isolated its systems and halted the intrusion, the full extent of the data breach remains under investigation.

Although Solimut officially reports approximately 550,000 members, a hacker has claimed to have stolen data belonging to 1.2 million individuals. This discrepancy suggests the stolen files may include information from partner organizations or cross-referenced databases. The hacker claims to have exfiltrated sensitive information, including over 770,000 bank details (IBAN and BIC), approximately 1.08 million salary statements, and millions of postal addresses and identity histories.

Solimut has notified the Autorité de contrôle prudentiel et de résolution and the Commission nationale de l’informatique et des libertés (CNIL). The mutual insurer has urged its members to remain highly vigilant against potential fraud, identity theft, and targeted phishing attempts via calls, emails, or messages appearing to come from the organization.