French tax administration hit by series of cyberattacks

The French tax administration, the Direction générale des finances publiques (DGFiP), has confirmed it was the target of three distinct cyberattacks over the summer. During a press conference on August 18, DGFiP Director General Amélie Verdier detailed the scope of the breaches, which included an intrusion by a group known as ZeroBytes in late June. The hackers gained access through compromised credentials of an agent.

The most significant breach affected at least 678,000 individuals and professionals, with approximately 350,000 taxpayers directly identified. Stolen data includes tax identification numbers, number of shares, and reference taxable income, alongside personal details such as addresses, phone numbers, and family status. A second attack targeted the professional cadastral data server.

Minister of Action and Public Accounts David Amiel issued a public apology, describing the situation as “intolerable” for the affected users. The Paris Prosecutor's Office has opened an investigation into fraudulent data extraction and criminal association.