The Bulgarian data protection authority has fined the country’s tax agency for a data breach that affected almost all of its working-age citizens, but the tax office has said it will appeal the decision and take legal action against the alleged hackers.