ANSSI identified 118 compromised accounts in its innovation lab following exploitation of a vulnerability in the Metabase software, referenced as CVE-2026-72898. The anti-money laundering service Tracfin was hit by a breach through a subcontractor compromising data of 136 regulated entities, including crypto service providers required to report suspicious transactions. Since August 1st, 99 data breaches have been reported to ANSSI, with 67 confirmed, including the DGFiP files exposing approximately 353,000 individuals and 252,000 professionals. The Zéro Logement Vacant platform affects 48 million property owners and the GAIA education file potentially exposes 4.35 million teachers. ANSSI cites infostealers on personal devices and the lack of two-factor authentication as the main causes of this unprecedented wave.
Source: Read the original article
