< Back to all clusters
[TECHNOLOGY] · France · 55 sources

started · updated

France tax agency cyberattack exposes data of 678,000 users

The French Directorate-General for Public Finances (DGFiP) has confirmed a sophisticated cyberattack that resulted in the unauthorized extraction of data belonging to approximately 678,000 individuals and businesses. The breach, which occurred in late June 2026, was reportedly facilitated by the usurpation of credentials from a government official outside the tax authority.

Compromised information includes sensitive personal details such as names, family status, reference tax income, and withholding tax rates. For businesses, the stolen data includes identification numbers and addresses. While the DGFiP emphasized that the breach does not grant direct access to secure accounts on the official impots.gouv.fr platform, officials warned of heightened risks regarding identity theft, phishing, and social engineering.

The Paris Public Prosecutor's Office has opened a criminal investigation, led by the French Anti-Cybercrime Office (Ofac), to determine the full extent of the theft and identify the perpetrators. A hacker using the pseudonym ‘ZeroBytes’ has claimed responsibility for the intrusion.

In response to the incident, Finance Minister David Amiel announced a parallel audit led by the National Cybersecurity Agency (ANSSI). Additionally, political leaders in the Senate are calling for parliamentary inquiry commissions to address recurring vulnerabilities in state digital infrastructure.

Entities

Agence nationale de la sécurité des systèmes d'information · Amélie Verdier · Chainalysis · DGFiP · David Amiel · Direction Générale des Finances Publiques · Directorate-General for Public Finances · FICOBA · France · French Anti-Cybercrime Office · Jameson Lopp · Ledger

Claims

What the coverage asserts, and how many sources carry each claim.

Sources

about 2 months ago
about 1 month ago
about 2 months ago
about 2 months ago