French tax administration: stolen staff passwords used to steal taxpayer data undetected for seven weeks

An attacker used stolen staff passwords to exfiltrate tax data on hundreds of thousands of taxpayers and businesses during June and July. Neither the tax administration nor France's national cybersecurity agency detected the data leaving. ANSSI said in a report published Tuesday that the attack was unsophisticated and succeeded due to weak security.