French Tax Breach Stole Data on 350K+ People, Undetected for 7 Weeks

TechNadu · x · 2026-09-30

An attack on France's tax authority exposed data on 350K+ people and 250K businesses. The password was reset but the attacker's session stayed active; ANSSI called it "unsophisticated," yet the wider theft went undetected for 7 weeks. TechNadu walks through ANSSI's breakdown: stolen credentials, password-only portals, an unrevoked session, and monitoring gaps.

Original post →

More from Safety

Safety channel →