France's DGFiP confirmed an intruder used a stolen identity to extract taxpayer names, addresses, and tax IDs in late June, disclosed only on August 13.