French Tax Data Theft Using Stolen Staff Passwords Went Undetected for Seven Weeks
By [email protected] (The Hacker News)
AI Summary
An attacker used stolen staff passwords to exfiltrate tax data on hundreds of thousands of French taxpayers and businesses from France's tax administration over a seven-week period in June and July 2026, going completely undetected by both the agency and ANSSI, France's national cybersecurity body. France's ANSSI published a post-incident report characterizing the attack as unsophisticated, attributing success to weak credential controls rather than advanced tradecraft. The incident underscores how basic identity hygiene failures can result in massive data exfiltration even under institutional oversight.
Relevance score: 85.0/100
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →