Bulgarian National Revenue Agency breach
A single SQL injection against a rarely-used VAT service let an attacker exfiltrate tax, income, health and pension records on more than 6 million people — almost the entire adult population of Bulgaria.
- Victim
- National Revenue Agency (NAP)
- Loss
- $2.9M
- Records
- 6.1M