ZeroBytes Claims Breach of French DGFiP Cadastral Server

· Original article ↗

Summary

ZeroBytes alleges it extracted 252,149 rows from France’s DGFiP cadastral data server, exposing 2,041,778 property holders. The group also claims continued access using valid credentials and an MFA bypass; the claims are unverified.

Key points

  • ZeroBytes claims a second intrusion against France’s DGFiP cadastral data server.
  • The group alleges it extracted 252,149 rows involving 2,041,778 property holders.
  • ZeroBytes claims it used valid credentials and bypassed multi-factor authentication.
  • The group says it retains access and is offering that access for sale; these claims are unverified.
  • The report says DGFiP has not publicly responded.

Article Details

Victim Organization
DGFiP
Incident Type
Alleged intrusion and data extraction from a cadastral data server, with claimed continued access using valid credentials and an MFA bypass.
Data Types Exposed
  • Cadastral data
  • Property-holder information
Affected Records
The group alleges extracting 252,149 rows involving 2,041,778 property holders.
Operational Impact
None reported. The alleged breach and continued access remain unverified.
Ransom Or Extortion
ZeroBytes claims it is offering access to the server for sale; no ransom demand is reported.
Claim Status
claimed

MITRE ATT&CK

Threat Actors

Countries