started · updated
France tax agency cyberattack exposes data of 678,000 users
The French Directorate-General for Public Finances (DGFiP) has confirmed a sophisticated cyberattack that resulted in the unauthorized extraction of data belonging to approximately 678,000 individuals and businesses. The breach, which occurred in late June 2026, was reportedly facilitated by the usurpation of credentials from a government official outside the tax authority.
Compromised information includes sensitive personal details such as names, family status, reference tax income, and withholding tax rates. For businesses, the stolen data includes identification numbers and addresses. While the DGFiP emphasized that the breach does not grant direct access to secure accounts on the official impots.gouv.fr platform, officials warned of heightened risks regarding identity theft, phishing, and social engineering.
The Paris Public Prosecutor's Office has opened a criminal investigation, led by the French Anti-Cybercrime Office (Ofac), to determine the full extent of the theft and identify the perpetrators. A hacker using the pseudonym ‘ZeroBytes’ has claimed responsibility for the intrusion.
In response to the incident, Finance Minister David Amiel announced a parallel audit led by the National Cybersecurity Agency (ANSSI). Additionally, political leaders in the Senate are calling for parliamentary inquiry commissions to address recurring vulnerabilities in state digital infrastructure.
Entities
Agence nationale de la sécurité des systèmes d'information · Amélie Verdier · Chainalysis · DGFiP · David Amiel · Direction Générale des Finances Publiques · Directorate-General for Public Finances · FICOBA · France · French Anti-Cybercrime Office · Jameson Lopp · Ledger
Claims
What the coverage asserts, and how many sources carry each claim.
- [● 3 SOURCES] Over 28,000 victims earn more than 100,000 Euros, and 400 earn over 1 million Euros. cryptonomist.ch · www.politiquematin.fr
- [● 19 SOURCES] Stolen data includes names, family status, taxable income, and withholding tax rates. livecoins.com.br · actu.fr · www.valeursactuelles.com · fr.news.yahoo.com · www.la-croix.com · +9 more
- [● 2 SOURCES] France has been identified as a hotspot for physical crypto-related attacks, including 36 reported incidents. cryptonomist.ch
- [● 29 SOURCES] The DGFiP confirmed a cyberattack exposed personal data of 678,000 individuals and businesses. livecoins.com.br · actu.fr · www.valeursactuelles.com · fr.news.yahoo.com · www.la-croix.com · +19 more
- [● 17 SOURCES] The Paris prosecutor's office has opened an investigation into the fraudulent extraction of personal data. actu.fr · www.valeursactuelles.com · fr.news.yahoo.com · www.la-croix.com · www.europesays.com · +7 more
- [● 4 SOURCES] The breach increases the risk of 'wrench attacks,' where criminals use physical violence to force cryptocurrency holders to surrender assets. www.cointrust.com · journalducoin.com · cryptonomist.ch
- [● 4 SOURCES] The attacker used credentials from a government official outside the tax authority to access the FICOBA register. bitcoinethereumnews.com · journalducoin.com · es.euronews.com · www.developpez.net
- [● 2 SOURCES] Approximately 1.2 million accounts were consulted in the FICOBA register breach. bitcoinethereumnews.com · www.europe-infos.fr
- [● 4 SOURCES] A hacker using the pseudonym ZeroBytes claimed responsibility for the intrusion and data extraction. www.developpez.net · www.emarketerz.fr · journalducoin.com · www.politiquematin.fr
- [● 6 SOURCES] The stolen data does not grant direct access to taxpayers' secure accounts on the official impots.gouv.fr platform. zap.aeiou.pt · cybernoz.com · www.europesays.com · 1001infos.net · cryptoast.fr
- [DISPUTED] The attacker gained access by usurping the credentials of a government official outside the tax authority. bitcoinethereumnews.com · www.developpez.net · cryptoast.fr · journalducoin.com · www.politiquematin.fr
- [● 6 SOURCES] Compromised data for individuals includes names, family quotient, reference tax income, and withholding tax rates. www.europesays.com · 1001infos.net · journalducoin.com · livecoins.com.br · cryptoast.fr