Cyberattack on Almerys Exposes Sensitive Data of Alan Policyholders in France A cyberattack targeting Almerys, a French third-party payment processor for health insurers, has compromised the personal data of policyholders from digital insurer Alan. The breach occurred at Almerys, which acts as an intermediary between insured individuals, healthcare providers, and mutual insurance companies meaning Alan’s customers were exposed despite no direct breach of Alan’s own systems. In a statement released Saturday, Alan confirmed the leaked data includes full civil status, Social Security numbers, contract numbers, insurer names, and coverage dates. However, bank details, passwords, addresses, and health records were not affected. Almerys responded by taking its reimbursement platform offline upon detecting the attack, causing disruptions for healthcare providers such as opticians and hospitals submitting claims. The incident highlights the risks of supply chain vulnerabilities in France’s healthcare payment ecosystem, where third-party breaches can have cascading effects on insurers and their customers. No direct intrusion into Alan’s servers was reported.