The French tax authority (DGFiP) has acknowledged a sophisticated cyberattack exposing the data of 678,000 individuals and professionals, including names, family quotient, reference taxable income, and withholding tax rates. The intrusions, which occurred in June and July, relied on the hijacking of credentials belonging to a DGFiP agent and an authorized third party. Another cybercriminal quickly capitalized on the situation by claiming a separate breach involving cadastral data from over 2 million French property owners. This incident marks the third intrusion targeting the tax authority in seven months, following the FICOBA breach in January that affected 1.2 million accounts. The Paris prosecutor’s office has opened an investigation and an interministerial crisis unit has been convened, while DGFiP announces additional security measures in collaboration with ANSSI.
Source: Read the original article
