FRENCH TAX AUTHORITY ADMITS DATA HEIST AFTER CROOK TOUTS 2M RECORDS

Summary from the TLDR InfoSec newsletter

France's tax authority (DGFiP) confirmed that a threat actor accessed their systems in June. A forum user, ZeroBytes, claimed stolen credentials and an MFA bypass exposed data on more than two million taxpayers. DGFiP says the access was cut off during a June audit and rejects claims of ongoing access. It is identifying affected people, will notify France's data protection watchdog, and plans user notifications.