France’s tax authority admits hackers made off with data on 678,000 individuals
An attacker used stolen credentials and an MFA bypass to steal tax data on 678,000 individuals from France's tax authority DGFiP.
France's General Directorate of Public Finances (DGFiP) disclosed that intrusions into its portals exposed tax data, including reference tax income, family quotient, withholding tax rate, and business identifiers such as company name and SIREN number, on 678,000 individuals and professionals. An attacker using the alias 'ZeroBytes' claimed credit on a cybercrime forum and offered a stolen database for sale, claiming the portal contains data on roughly 20 million citizens. DGFiP suspended the affected accounts, notified the CNIL, and is working with ANSSI and the finance ministry's security office; it said the main online tax portals and their login credentials were not compromised.
- Attacker 'ZeroBytes' claimed credit on a forum and listed the stolen database for sale
- Exposed data includes reference tax income, family quotient, withholding rate and SIREN numbers
- DGFiP said individual and business tax portals and their passwords were not compromised
- Agency suspended affected accounts, notified CNIL, and is cooperating with ANSSI
- Latest in a run of cybersecurity incidents affecting French government agencies
From the original article
2 min read at helpnetsecurity.com
France’s tax authority has disclosed a data breach after an attacker accessed the General Directorate of Public Finances (DGFiP) systems, saying the intrusion exposed data on 678,000 individuals and professionals. The incident came to light after an alleged attacker using the alias “ZeroBytes” took credit on a cybercrime forum and listed a stolen database for sale.
By @helpnetsecurity · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.