
TL;DR
France's tax authority confirmed a data breach affecting 680,000 taxpayers, with sensitive information stolen by a hacker known as ZeroBytes. The breach, which occurred in June, included personal details but not financial data.
✦ Why It Matters
Review and enhance your organization's data security measures to prevent similar breaches.
Key Takeaways
Full Summary
A hacker identified as ZeroBytes claimed to have stolen data from France's Directorate General of Public Finances, affecting approximately 680,000 individuals and businesses. The breach, which took place on June 26, involved unauthorized access to an internal tool, allowing the hacker to extract names, dates of birth, addresses, and property information.
While the tax authority detected the intrusion at the time, they did not disclose it publicly until now. Notably, passwords and banking details were not part of the stolen data.
A second potential leak affecting around 2 million property owners is also being discussed in cybercriminal forums, though it lacks official confirmation. The French government's cybersecurity agency, ANSSI, is currently investigating the incident, and the CNIL has been notified as per legal requirements.
Related