The Direction generale des Finances publiques is facing a third security alert in a matter of days. A vulnerability identified by researcher LunarisSec allegedly allowed unauthenticated access to several million records containing identities, addresses, death dates and patrimonial data linked to vacant successions. This new flaw follows incidents at impots.gouv.fr, where 678,438 lines of data were allegedly extracted by cybercriminal ZeroBytes, and the Serveur Professionnel de Donnees Cadastrales, compromised with 252,149 lines concerning over 2 million property owners. According to FrenchBreaches, the flaw has since been patched, but the duration of exposure and the extent of any consultations carried out remain unknown.
Source: Read the original article
