France tax authority data breach affects 678,000 users

French tax data breach cryptocurrency security wrench attacks DGFiP data privacy

The French tax authority, Direction générale des Finances publiques (DGFiP), has confirmed a significant data breach affecting 678,000 individuals and businesses. The unauthorized access, which occurred in late June and early July 2026, allowed malicious actors to extract sensitive information, including names, addresses, family status, taxable income, and withholding tax rates.

The Paris prosecutor's office has opened an investigation into the matter, tasking the Office anticybercriminalité (Ofac) with investigating the fraudulent extraction of personal data. The administration described the operation as more sophisticated than previous attacks.

Security experts have expressed heightened concern regarding the safety of cryptocurrency investors. Because France is already a hotspot for 'wrench attacks'—violent physical crimes such as home invasions and kidnappings used to extort digital assets—the leak of financial data could provide criminals with the information needed to identify and target high-net-worth individuals. Analysts note that among the victims, over 28,000 earn more than 100,000 Euros, and approximately 400 earn over 1 million Euros.

Entities

Chainalysis · Direction Générale des Finances Publiques · France · Jameson Lopp · Ledger · Office anticybercriminalité · Paris prosecutor's office

Claims

What the coverage asserts, and how well corroborated each claim is across sources.

[○ 1 SOURCE] France has been identified as a hotspot for physical crypto-related attacks, including 36 reported incidents.
[○ 1 SOURCE] Security analyst Jameson Lopp noted that over 28,000 victims earn more than 100,000 Euros, with 400 earning over 1 million Euros.
[○ 1 SOURCE] The Paris prosecutor's office has opened an investigation into the fraudulent extraction of personal data. actu.fr
[● 3 SOURCES] The French tax authority confirmed a data breach affecting 678,000 individuals and businesses. livecoins.com.br · actu.fr
[● 2 SOURCES] Leaked data includes names, family status, taxable income, and withholding tax rates. livecoins.com.br · actu.fr
[● 2 SOURCES] The breach increases the risk of 'wrench attacks,' where criminals use physical violence to force cryptocurrency holders to surrender assets. www.cointrust.com