CNIL announces audits of French tax and identity agencies after major data breaches

CNIL data breach cybersecurity DGFiP ANTS

The French data protection authority, CNIL, has announced audits of two major government agencies following significant data breaches. Marie-Laure Denis, President of CNIL, confirmed during a broadcast of Cash Investigation on France 2 that investigators will visit the Direction générale des finances publiques (DGFiP) to examine recent security failures.

During the summer, the DGFiP experienced multiple system intrusions that resulted in the theft of personal data belonging to approximately 700,000 people. Depending on the findings, CNIL may issue a formal notice or pursue sanctions, though the authority noted that its ability to fine the State is more limited than its power over other administrative bodies.

Additionally, CNIL is launching an audit of the Agence nationale des titres sécurisés (ANTS), which manages identity documents. The agency was targeted in a massive cyberattack in April, leading to the theft of data from nearly 12 million individuals and professionals. These incidents occur amid a broader rise in cybercrime, with reported fraud cases increasing by 40% in 2025.

Entities

Agence nationale des titres sécurisés · CNIL · Direction Générale des Finances Publiques · France 2 · Marie-Laure Denis

Claims

What the coverage asserts, and how many sources carry each claim.

[● 4 SOURCES] An attack on the ANTS in April resulted in the theft of data belonging to nearly 12 million individuals and professionals. www.estrepublicain.fr · www.lejsl.com · www.vosgesmatin.fr · www.ledauphine.com
[○ 1 SOURCE] Cyber fraud cases increased by 40% in 2025. www.la-croix.com
[● 4 SOURCES] CNIL will also audit the Agence nationale des titres sécurisés (ANTS). www.estrepublicain.fr · www.lejsl.com · www.vosgesmatin.fr · www.ledauphine.com
[● 4 SOURCES] CNIL will conduct an audit of the Direction générale des finances publiques (DGFiP). www.estrepublicain.fr · www.lejsl.com · www.vosgesmatin.fr · www.ledauphine.com
[● 4 SOURCES] Data of approximately 700,000 people was stolen during intrusions into the DGFiP systems this summer. www.estrepublicain.fr · www.lejsl.com · www.vosgesmatin.fr · www.ledauphine.com