French tax authority says break-in exposed data of 600K, including some private messages

The French tax authority (Direction générale des Finances Publiques - DGFiP) has revealed a data breach that exposed the personal information of approximately 600,000 individuals, including some private messages. The breach stemmed from a vulnerability in their on-prem SharePoint system, allowing attackers to exploit a zero-day. This incident highlights ongoing security challenges for organizations relying on legacy systems and the potential for attackers to leverage known vulnerabilities.