French Tax Authority Says Breach Exposed Data of 678,000 People
Summary
France’s DGFiP says attackers used compromised employee and third-party credentials to steal data belonging to 678,000 users. Exposed information included tax, company and real-estate records; the investigation continues.
Key points
- DGFiP said the unauthorized access occurred in June and July and was suspended after detection; it found no evidence of exfiltration at that time.
- The agency later confirmed that attackers used compromised credentials for an employee and a third-party account to access its systems and steal information.
- The compromised information included reference tax income, withholding tax rates, company names and identifiers, and real-estate cadastral data.
- DGFiP said usernames and passwords were not compromised and reported the incident to France’s data protection authority, CNIL.
- The authority is still investigating the breach’s scope and exact number of affected people and plans to contact them directly.
Article Details
- Victim Organization
- Directorate General of Public Finances (DGFiP)
- Incident Type
- Data breach involving unauthorized access with compromised employee and third-party account credentials, followed by theft of user information.
- Data Types Exposed
- Reference tax income
- Withholding tax rate
- Company names and unique identifiers
- Cadastral data on real estate addresses and surfaces
- Affected Records
- 678,000 users, according to DGFiP; the agency said it was still investigating the exact number potentially affected.
- Operational Impact
- The unauthorized access was suspended upon detection. DGFiP continues to investigate the breach and said it will contact affected individuals directly. No service disruption was reported.
- Claim Status
- confirmed
MITRE ATT&CK
Threat Actors
Countries
FranceFrance’s Directorate General of Public Finances (DGFiP) has disclosed a data breach impacting approximately 680,000 individuals.RomaniaThe incident came to light roughly one month after another European government agency, Romania’s National Agency for Cadastre and Property Registration (ANCPI), fell victim to a disruptive cyberattack.
Industries
GovernmentThe incident came to light roughly one month after another European government agency, Romania’s National Agency for Cadastre and Property Registration (ANCPI), fell victim to a disruptive cyberattack.real estateAccording to the finance agency, reference tax income, withholding tax rate, company names and unique identifiers, and cadastral data on real estate addresses and surfaces were compromised.