The Pension Insurance Company suffered the theft of data of 370,000 people through an Internet portal intended for social service providers for retirees, it reported in a press release on Friday, September 13. “Personal data (address, Social Security number, approximate amount of resources) corresponding to approximately 370,000 beneficiaries were compromised”reported the National Old Age Insurance Fund (CNAV).
A sample of data, published online on September 2 by the alleged hacker, actually reveals personal data such as monthly income, phone numbers and addresses. We can also see, in certain cases, the family situation of the people who are victims of this data theft: single, widowed, divorced, etc.
account theft
“Most of the data is old: some of the people affected, for example, are dead”The CNAV stated, adding that“No banking data, no data relating to payments, retirement, career or benefits paid have been compromised.” The data was stolen through the theft of accounts from service providers who used the portal. This, called the Social Action Partners Portal, was put out of service by the CNAV, which “apologizes to those affected”.
According to BreachForums, a forum specialising in the resale of data resulting from hacking, consulted by Agence France-Presse, the data stolen from CNAV was available for sale on an account that also offered data stolen from the Truffaut, Cultura and Baker brands. According to CNAV, the theft was reported to the Commission Nationale de l’Informatique et des Libertés (CNIL) and to the interested parties. “will be informed”. “A complaint was also filed”he clarified.
