2026 Solimut Mutuelle — confirms breach; misere claims ~1.24M insured + NIR/IBAN
Data compromised
Solimut: personal data under inventory. Actor misere: identities, contacts, bank accounts (~770k claimed), NIR/SSN fields, contracts, DSN, addresses/history (unverified volumes).
Technical writeup
Solimut Mutuelle de France confirmed on August 23, 2026 a cyberattack causing a personal-data breach identified that morning; services continued, ACPR was notified, CNIL notification planned, member phishing vigilance urged. Actor misere claimed a full adherent database copy (~1,244,445 insured, ~770,467 bank accounts, large DSN/address/history tables) with Cyberattaque.org reviewing sample CSVs. ZeroBytes separately alleged SQLi volumes including ~1.37M NIR — not Solimut-confirmed. recordsAffected uses misere’s insured floor pending mutuelle census; companyConfirmed true.
Root cause
Confirmed cyberattack Aug 23, 2026 (Solimut); misere leak claim of full member DB (actor counts unverified)