Freemantle till I was 12 when we were deported to the UK when father took a Professorship. Last time I went to home was in 2023; I took out Belgium nationality when the UK decided to follow their vanity project.
which platform please?
C’est seulement lors de la revendication de l’attaque le 12 août que les services de Bercy ont pu repérer certaines activités et notamment l’extraction de ces données personnelles.
According to this, the Impots didn’t know the full horror until 12th August and have not delayed informing/publicising the matter.
The hackers claim to have already sold off part of their haul of data…it seems they had obtained access to a VPN being used by DGFiP staff working remotely. In the case of the Impot’s property data, they circumvented two factor authentication to access that data.
Perhaps it’s time we all returned to the simple pen and paper routine…
![]()
Whilst that would be good, they would still put all the results into a computer somewhere for easy reference. I think that would only work if there were more local offices, more permanent staff and people could along at any time without having to go through the internet for a rdv first. The computerisation of paperwork has got out of hand or the systems used are not secure enough which comes down to money spent on systems in the beginning.
Fair enough… and in-house computers don’t have to connect to the rest of the world.
Yes, I agree. Closing so many offices was a mistake (in my opinion). One Tax Lady told me she could deal more efficiently (and swiftly) with someone face-to-face than with emails flying back and forth ![]()
She doesn’t know if it’s related to the Impôts data breach or to a breach at our workplace but a colleague received 2 very convincing-looking spear phishing emails yesterday, one purportedly from Amazon Prime.
Both had her bank account number.
Same with everything Stella in days gone by. Either to the Mairie to renew stuff like the CDS or permis de conduire, the fisc face to face with several helpers at busy times of the year and the Prefecture for more important stuff like Carte Grise registration or alterations, It felt much more secure too dealing with human beings rather than a machine.
Hopefully she’s reported these suspected nasties/scam/spam… there’s a special site for this, but darned if I can locate it now… ![]()
Maybe this one?
You can also of course report spam directly from your inbox, to the email provider.
Proton Pass, but there are others like: simple login which is also covered by Swiss Privacy laws, DuckDuckGo do one, aliasmail that appears to be Russian? given the names of the founders.
Given the seriousness of the latest breach, the Minister in charge of the DFGiP (Impôts) has insisted that the agency starts contacting people directly affected, from tomorrow (Monday 17th). Let’s hope that aren’t any SF people contacted…
Lets see. The data they have is stuff you cant easily change (or of course change at all) so this will cause a right mess. Am hoping its not me however recently spam levels have shot up on my personal email.
Time to watch the bank account carefully.
There is a certain sense of inevitability…An IT security specialist being interviewed this morning warned that scammers may well try to impersonate genuine emails from the DGFiP notifying taxpayers - from today - that they have been the target of the recent major hack of the Impots site. The scammers will presumably include a link to access their tax account which will inevitably launch some sort of malware etc etc.
The specialist advised those affected, at the very least, to change their email address used for the Impôts to a unique address. This should only to be used for corresponding with the Impôts going forward.
Top tip for Gmail users is that you can use the + sign to create “additional” email addresses but they all come into the range mailbox.
So, if I was fred@gmail.com then I could use Fred+impots@gmail.com. To the outside world it’s a different address but it will land in your normal inbox and you’ll see it’s the impôts address.
Unfortunately that’s rejected by some (often official) pages for personal details.
They’ve arrested two suspects for the data breach of Impôts information, aged 16 and 18. The 18 year old has “previous” and was known to the Cyber police..
I hope nobody on SF has received notification from DGFiP that their personal tax information was included in this major breach.
I think you can also insert an extra dot into a different part of the same gmail address and it still reaches your inbox. ISTR it worked when I needed a different address to deal with the same outfit twice but was a few years ago.
