Read at BleepingComputer
French healthcare services firm Viamedis experienced a cyberattack that exposed the data of policyholders and healthcare professionals. The breach included sensitive information such as social security numbers, names of health insurers, and guarantees open to third-party payment.
The data exposed in the attack includes a beneficiary's marital status, date of birth, social security number, name of health insurer, and guarantees open to third-party payment.
Viamedis clarified that the breach was not the result of ransomware. Instead, it was a successful phishing attack on an employee that allowed the threat actor to access their systems.
Cande has also clarified that the cyberattack wasn't ransomware. Instead, he said a successful phishing attack on an employee allowed the threat actor to breach its systems.