The Register reports:
France’s tax authority has confirmed that an intruder accessed its systems and extracted data in June after an alleged cybercriminal advertised a purported database of 2 million taxpayers.
Using the alias “ZeroBytes,” the alleged crook behind the attack on the General Directorate of Public Finances (DGFiP) advertised the stolen database on a cybercrime forum on Wednesday.
They claimed the database contained details of more than 2 million French taxpayers and that they gained access using stolen credentials and an MFA bypass technique.
ZeroBytes also claimed to retain access to DGFiP’s systems and offered to sell it alongside the database.
DGFiP did not immediately answer our questions about the attacker’s claims. However, in a statement released Thursday, it disputed the claim that ZeroBytes retained access.
Read more at The Register.
