France's DGFiP confirmed on August 13 that an attacker extracted 678,438 rows of tax data after spoofing an identity in late June. A second claim surfaced on August 14 against the agency's cadastral server, covering 2,041,778 property holders, and the DGFiP has not confirmed it.
Read the full story: France's Tax Agency Faces Second Breach Claim in Three Days →
Transcript
France's tax administration has been breached twice by the same person. The agency confirmed the first one yesterday. Someone spoofed an identity back in late June and walked out with 678,438 rows of tax data. Income, dependents, withholding rates, contact details. This morning a second claim landed. July 29th, the cadastral server, the one that maps who owns which piece of land. 252,000 rows, but those cover more than two million property holders. And here's the part that matters. Neither of these was a database dump. Both went through internal lookup tools using a valid account, with multi factor authentication bypassed on the second one. Search a name, read the result, search the next one. Every single request looked legitimate. Nobody noticed until the attacker decided to post about it.