A hacker hit Bulgaria's NRA tax agency and gained access to the tax records of Bulgaria's citizens — all of them. That is the initial report from the Bulgarian government as word begins to emerge of the attack from what the government is calling a "wizard hacker" who breached the system.
Bulgarian media has identified Kristian Boykov, an employee of US cybersecurity firm TAD Group. He has been arrested by authorities in Bulgaria though both he and his employer have dismissed the charges against him.
Initial reports from Bulgaria's government and other groups differ on whether the attacker is very talented, the government's IT security is very poor, or some combination of the two. Regardless of the ultimate determination of the cause, the tax agency now faces a fine of up to 20 million euros (approximately $22.5 million) over the privacy violation.