Executive Summary

An attacker used stolen staff passwords at France’s tax administration to steal tax data of hundreds of thousands of taxpayers and businesses in June and July. The breach went unnoticed for seven weeks, with neither the tax authority nor ANSSI detecting the data exfiltration. The attack was simple, exploiting weak credentials.

---

Intelligence Metadata - Source Publisher: The Hacker News - Published Date: 2026-09-29T17:47:01+00:00 - Category: threat-intel

Original Description: An attacker used stolen passwords of staff at France's tax administration to take tax data on hundreds of thousands of taxpayers and businesses in June and July. Neither the tax administration nor France's national cybersecurity agency saw the data leave. The attack was not sophisticated, the agency, ANSSI, says in a report (in French) published on Tuesday: it worked because of weak

"Work out your own salvation. Do not depend on others."

— Buddha