Stolen staff passwords reached French tax records in June and July

I read The Hacker News on September 29, 2026. The report they point to is from ANSSI, in French, and the article says it came out Tuesday.

Someone used passwords that belonged to staff at France's tax office. The records are taxpayers and companies. The scale they give is hundreds of thousands. The months are June and July.

ANSSI says the tax office and the agency both missed the transfer. They also say this was not a sophisticated break-in. The feed I have stops on the word weak, so I am not filling in the cause. What I keep is that a staff password was enough, and it ran across two months before the public note.

Source I used: The Hacker News. The link is under this column.