Cyberattacks hit French tax authority and LDLC retailer

France is facing scrutiny over cybersecurity vulnerabilities following significant data breaches at the DGFIP and the e-commerce retailer LDLC.

A cyberattack on the DGFIP (Direction générale des Finances publiques) compromised the personal and fiscal information of nearly 700,000 individuals and businesses. Stolen data included tax references, family quotients, withholding tax rates, and property information. An investigation by Anssi confirmed that strong authentication, such as two-factor authentication, was not consistently implemented across the agency, despite recommendations from the CNIL and EU NIS 2 directives.

Separately, the French e-commerce company LDLC reported a cyberattack that exposed customer names, contact details, and account information. While the company stated that banking data and passwords remained secure, the breach has raised concerns regarding identity theft. LDLC has isolated the compromised systems and reported the incident to the CNIL.