Almerys Cyberattack Exposes Personal Data of Health Insurance Clients

Almerys, a third-party payment specialist, confirmed a cyberattack on May 25, 2026, resulting in the exposure of personal data of its clients. The attack allowed unauthorized access to the site used for processing health coverage requests, affecting all clients. Compromised data includes names, Social Security numbers, and insurance contract details, but does not involve banking or health data. Almerys has closed the affected site and is implementing measures to mitigate the impact. The company has informed stakeholders and is working on transitional solutions for affected health professionals. Almerys previously suffered a significant data breach in early 2024. A complaint has been filed with the prosecutor's office, and an investigation is underway by the Paris cybercrime unit.

Key Points: • Almerys confirmed a cyberattack exposing personal data of all clients. • Compromised data includes names, Social Security numbers, and insurance details. • The affected site has been closed, and stakeholders have been notified.