French Tax Data Theft Undetected for Seven Weeks

An attacker used stolen DGFIP staff passwords to take tax data on over 350,000 individuals and 250,000 businesses in June and July. ANSSI says weak login protection and poor network separation let the theft go unnoticed until the attacker claimed it on August 12. Land-registry data on nearly 435,000 households was also taken.