French Tax Administration Data Breached Using Stolen Staff Credentials

Attackers stole tax data belonging to hundreds of thousands of individuals and businesses from the French tax administration over a seven-week period in June and July. The breach, executed using compromised staff passwords, went completely undetected by authorities until ANSSI published a report. The cybersecurity agency noted that the attack lacked sophistication, succeeding primarily due to poor credential management and undetected data exfiltration.