< Back to all clusters
[TECHNOLOGY] · France · 12 sources

started · updated

France cyberattacks: DGFiP tax data and Santé publique France records exposed

France is facing two significant cyberattacks targeting government-related data.

A hacker known as ZeroBytes has claimed to have stolen 678,438 lines of tax data from the Direction générale des Finances publiques (DGFiP). The intrusion, which reportedly occurred in late June 2026, involved compromising internal servers to gain VPN access to a search tool for individuals and professionals. The stolen data includes incomes, addresses, and tax identifiers. The Ministry of Economy has confirmed the unauthorized access and stated that affected users will be notified individually.

Separately, Santé publique France confirmed a cyberattack on a platform managed by a third-party provider. The breach, which was announced following a dark web claim on August 11, exposed approximately 80,000 professional contact records. These files include names, addresses, phone numbers, emails, and professional roles. The agency emphasized that no medical records, diagnoses, or social security numbers were compromised, as the targeted site was used specifically for ordering prevention campaign documents.

Entities

CNIL · Direction Générale des Finances Publiques · France · Santé publique France · ZeroBytes

Claims

What the coverage asserts, and how well corroborated each claim is across sources.

Sources