The French Ministry of the Economy and Finance disclosed a breach at DGFiP after an attacker using the ZeroBytes handle accessed and stole data tied to 678,000 individuals and professionals. The attacker also claimed access to the SPDC platform and offered stolen records for sale on PwnForums, adding to a wave of recent French government data breaches. #DGFiP #ZeroBytes #SPDC #PwnForums
Keypoints
- DGFiP confirmed unauthorized access to systems and data theft affecting 678,000 individuals and professionals.
- Exposed information included tax data, business identifiers, and cadastral details.
- The attacker known as ZeroBytes claimed the breach and listed stolen data for sale on PwnForums.
- French authorities shut down access to sensitive systems and involved ANSSI in the investigation.
- The Finance Ministry will notify affected people by email or letter starting next week.