Data breach at Point Vision centers

A vulnerability in the service provider managing appointments for Point Vision centers allowed an unauthorized individual to access the internal calendar and download patient data. Point Vision has informed its patients of a cyberattack through an email, stating that the affected data included names, first names, birth dates, contact information, and some exchanges related to appointments.

Scope of the breach

The company is uncertain whether the attacker accessed or downloaded account passwords or the reasons for appointments, as some traces of the attack have been deleted. The data breach occurred through a vulnerability in the service provider's solutions, which the attacker exploited to access Point Vision's appointment management tool.

Response to the breach

In response, the consortium has cut off access to affected environments, disabled malicious mechanisms, and deployed patches. It has also changed passwords for technical and administrative accounts, as well as authentication methods for some third-party services. The software remains suspended, and another appointment scheduling solution is being used.

Risks and user actions

The retrieved data could be used to carry out credible attacks, especially if combined with previous data leaks, such as the one affecting Ameli. At the time of writing, it is not possible to access the account to change the password, as the login module appears to have been temporarily removed. Users are advised to change passwords for other services linked to the same email address.

Previous incidents in the sector

Point Vision has not disclosed the number of people affected. This is not the first time a medical software publisher has been targeted. A similar attack was reported in February against MonLogicielMedical by Cegedim Santé, which could have affected between 11 and 15 million patients.