680,000 Impacted by French Tax Authority Data Breach
France’s Directorate General of Public Finances (DGFiP) has disclosed a data breach impacting approximately 680,000 individuals.
The incident was disclosed after a threat actor boasted on a hacking forum about accessing DGFiP’s internal systems and exfiltrating data.
According to DGFiP, the threat actor accessed its systems in June and July, and the unauthorized access was suspended immediately upon detection. However, the public tax authority did not discover evidence of data exfiltration at the time.
Last week, DGFiP confirmed that the attackers used compromised credentials for an employee and a third-party account to access its systems and steal the information of 678,000 users.
According to the finance agency, reference tax income, withholding tax rate, company names and unique identifiers, and cadastral data on real estate addresses and surfaces were compromised.
No other information, including usernames and passwords, was compromised in the attack, which was immediately reported to France’s data protection authority...
Copyright of this story solely belongs to securityweek.com. To see the full text click HERE
