started · updated
France tax authority breach exposes 678,000 taxpayers' data
The French General Directorate of Public Finances (DGFiP) has confirmed a major cyberattack that exposed the sensitive data of approximately 678,000 taxpayers. The breach, which was detected in June after a hacker compromised an employee's account, involved the theft of personal identification, tax rates, addresses, and income information.
Detailed estimates indicate the leak includes data for nearly 27,000 individuals earning over €100,000, 386 earning over €1 million, and 8 earning over €10 million. The attacker reportedly used a VPN tool to access internal systems and has since attempted to sell the database online.
The breach has heightened security concerns for cryptocurrency holders in France. Experts warn that the exposure of high-net-worth individuals' financial details could facilitate 'wrench attacks'—physical violence or kidnapping used to coerce victims into surrendering digital assets. This follows a rise in such incidents, with Chainalysis reporting over $30 million in losses from crypto-related attacks in France during the first half of 2026.
Entities
Amélie Verdier · Commission nationale de l’informatique et des libertés · France · General Directorate of Public Finances · ZeroBytes
Claims
What the coverage asserts, and how well corroborated each claim is across sources.
- [● 3 SOURCES] The General Directorate of Public Finances (DGFiP) confirmed a cyberattack affecting approximately 678,000 taxpayers. bitcoinethereumnews.com · www.bvoltaire.fr · news.bitcoin.com
- [● 2 SOURCES] Chainalysis recorded 30 crypto-related 'wrench attacks' in France during the first half of 2026, totaling over $30 million in losses. bitcoinethereumnews.com · abmedia.io
- [● 2 SOURCES] Estimates suggest 678,437 records were affected, including 26,805 people with incomes over €100,000 and 386 earning over €1 million. bitcoinethereumnews.com · abmedia.io
- [○ 1 SOURCE] The Director General of the tax administration, Amélie Verdier, stated the compromise occurred in June via a stolen employee account. www.bvoltaire.fr
- [○ 1 SOURCE] The DGFiP plans to contact affected individuals and professionals directly via email or post next week. news.bitcoin.com
- [● 2 SOURCES] The attacker used sophisticated methods, testing access in small volumes to avoid detection. www.bvoltaire.fr · news.bitcoin.com