
French Tax Data Theft Using Stolen Staff Passwords Went Undetected for Seven Weeks
Attackers with infostealer-stolen DGFIP staff passwords scraped French tax data on 350,000 individuals and 250,000 businesses, undetected for seven weeks.
6 stories, newest first · one card per story

Attackers with infostealer-stolen DGFIP staff passwords scraped French tax data on 350,000 individuals and 250,000 businesses, undetected for seven weeks.

France created REACTIV, an ANSSI-led interministerial cyber incident response unit for state services, after the DGFiP breach exposed up to 678,000 taxpayers.
French prosecutors arrested an 18-year-old suspected ZeroBytes member tied to a tax authority breach exposing data of 600,000 people.

An attacker used stolen credentials and an MFA bypass to steal tax data on 678,000 individuals from France's tax authority DGFiP.

Hackers stole personal and tax data of 678,000 individuals and businesses from France's tax agency DGFiP, prompting a Paris criminal investigation.

France's tax authority DGFiP confirmed hackers extracted data on individuals and businesses; a hacker claims more than 600,000 victims.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views