The French National Cybersecurity Agency (ANSSI) published a damning 20-page report on September 29 detailing the hack of the Direction generale des finances publiques (DGFiP) that occurred between May and August 2026. The attackers stole approximately 14 GB of data by targeting personal computers of tax agents and a land surveyor, where infostealer malware harvested credentials, without employing sophisticated methods. Neither the DGFiP nor ANSSI detected the intrusion over three months, despite warning signs such as 11 GB of data being exfiltrated between June 22 and 25. The Zerobytes group claimed responsibility for stealing data on 678,000 individuals and professionals, plus a second breach affecting 2 million French citizens including their property holdings. An 18-year-old suspect identified as a Zerobytes member was charged and placed in pretrial detention in Paris in early September.
Source: Read the original article
