The National Revenue Agency says the breach exposed data for 5.1 million Bulgarians, including 1.1 million who are deceased. A Bulgarian media outlet reports that the agency plans to appeal the fine, according to Bank Info Security. The investigation’s results led the Sofia City Prosecutor’s Office to file criminal charges against three men who worked for a penetration testing company, TAD Group.
The tax office breach occurred in late June 2019 and became known in mid-July 2019. The tax data exposed included national ID numbers, tax and insurance information and VAT [value-added tax] refund information, according to prosecutors.
The National Revenue Agency says the exposed data also includes personal data and tax information for foreign individuals and legal entities. For some, it included birth dates, addresses, phone numbers and email addresses. Moreover, data on high-level government officials has also been exposed.
Every day we send out a free e-mail with the most important headlines of the last 24 hours.
Subscribe now