# France AI-driven cyber threats and major data breaches > Live situation record from CLSTR: https://clstr.news/situations/france-ai-driven-cyber-threats > Updated: 2026-08-24T06:54:06.000Z. Sources: 52. Developments: 5. In late July 2026, French authorities reported a sharp rise in AI‑enabled document fraud and ransomware attacks. By early August, France faced a hybrid‑war environment with a 358% surge in DDoS attacks and widespread AI-generated deep‑fakes. Major breaches followed, including the DGFiP, where the hacker group ZeroBytes was linked to the theft of sensitive fiscal data belonging to approximately 678,000 individuals and professionals. Additionally, the SFR telecommunications network and cadastral data affecting up to 1.8 million accounts were compromised. By late August, the fallout from the DGFiP breach intensified. While Public Finance Minister David Amiel assured that tax payments and assessments were not affected, and that encrypted health data remained unexploitable, the breach has triggered significant legal and political backlash. Several hundred victims are organizing a class-action lawsuit against the state for moral prejudice. Furthermore, the Syndicat des Indépendants et des TPE (SDI) has called for a moratorium on the upcoming electronic invoicing reform, originally scheduled to begin on September 1, 2026. The SDI is demanding an independent security audit of the platforms, expressing concerns regarding the government’s capacity to protect the massive volumes of transaction data businesses will be required to transmit under the new mandate. Failure to comply with the reform's requirements can result in annual fines of up to €15,000 per company. ## Claims - The DGFiP suffered three successive cyberattacks in June, July, and August. (disputed by 5 sources) - The DGFiP confirmed two intrusions occurred in late June and late July. (disputed by 4 sources) - A total of 678,000 individuals and professionals were victims of the data theft. (corroborated by 14 sources) - The cybercriminal group ZeroBytes claimed responsibility for the massive theft in mid-August. (corroborated by 10 sources) - The Paris prosecutor's office has opened an investigation into fraudulent data extraction and criminal conspiracy. (corroborated by 9 sources) - SFR confirmed a cyberattack that exposed personal data of some fiber subscribers, detected on July 2. (corroborated by 6 sources) - Minister David Amiel issued a public apology, calling the situation unbearable for French citizens. (corroborated by 5 sources) - Stolen data includes tax IDs, civil status, and postal, telephone, and electronic contact information. (corroborated by 5 sources) - The largest data theft was achieved by hijacking an employee's credentials. (corroborated by 4 sources) - All VAT-registered companies must be able to receive electronic invoices starting September 1, 2026. (corroborated by 4 sources) - The cyberattack did not affect tax payments or tax assessment notices. (corroborated by 3 sources) - Approximately 350,000 of the victims are taxpayers. (corroborated by 2 sources) ## Timeline ### 2026-08-24: DGFiP cyberattack triggers calls for electronic invoicing reform moratorium A major cyberattack on France's DGFiP compromised data for 678,000 users. In response, the SDI is demanding a moratorium on the 2026 electronic invoicing reform pending a security audit. 9 sources. https://clstr.news/cluster/cyberattacks-trigger-massive-data-breaches-in-france-and-csdd ### 2026-08-21: France faces wave of cyberattacks targeting Civil Protection and banking clients Multiple cyberattacks in France have targeted the Civil Protection association and a VIP concierge service, exposing personal data of volunteers and thousands of banking clients. 10 sources. https://clstr.news/cluster/john-paul-concierge-service-hit-by-data-breach ### 2026-08-19: DGFiP cyberattacks compromise data of 678,000 taxpayers The French tax agency (DGFiP) confirmed three major cyberattacks in mid-2026, affecting 678,000 people and 1.8 million cadastral accounts. The group ZeroBytes claimed responsibility for the data theft. 37 sources. https://clstr.news/cluster/dgfip-cyberattacks-compromise-data-of-678000-people-in-france ### 2026-08-04: France confronts rising cyber and hybrid warfare threats in 2026 France faces a surge in cyber and hybrid warfare in 2026, with record DDoS attacks, AI‑driven phishing, deep‑fake growth, and incidents affecting 15 million citizens. 2 sources. https://clstr.news/cluster/france-confronts-rising-cyber-and-hybrid-warfare-threats-in-2026 ### 2026-07-31: AI‑enabled fraud and ransomware attacks rise sharply in France AI is making document fraud and ransomware attacks far more effective in France, with many firms hit and a growing number of people forging official papers. 2 sources. https://clstr.news/cluster/aienabled-fraud-and-ransomware-attacks-rise-sharply-in-france --- Cite as: France AI-driven cyber threats and major data breaches. CLSTR, https://clstr.news/situations/france-ai-driven-cyber-threats