Monitor this situation.

Unsubscribe anytime.

[SITUATION] · [ACTIVE] · [TECHNOLOGY]

2 clusters · 43 sources · 3 days · First seen 2 days ago · Last updated about 9 hours ago

French tax authority cyberattack and data breach

Overview

The French Directorate General of Public Finances (DGFiP) confirmed a major cyberattack that occurred in mid-June 2026. The breach involved unauthorized access to an internal search tool via a compromised VPN following identity theft, allowing threat actors to bypass access controls and extract data from both individuals and professionals.

Approximately 678,438 taxpayers have been potentially affected. The compromised information includes names, dates of birth, addresses, telephone numbers, and email addresses, alongside sensitive tax data such as reference income and withholding tax rates. The leak notably includes data on high-income earners, including 26,805 people earning over €100,000, 386 earning over €1,000,000, and eight earning over €10,000,000.

A hacker identified as Zerobytes has reportedly offered the data for sale online. The breach has raised specific security concerns regarding cryptocurrency holders in France, as experts fear the leaked data could facilitate “wrench attacks”—physical thefts or kidnappings targeting wealthy investors. This concern is underscored by reports from Chainalysis, which noted over $30 million in losses from crypto-related attacks in France during the first half of 2026. The DGFiP has implemented new security restrictions and plans to notify affected individuals directly to provide guidance on mitigating identity theft and targeted scams.

Entities

France · ZeroBytes · Amélie Verdier · Bercy · Commission nationale de l’informatique et des libertés

Claims

What the coverage asserts, and how well corroborated each claim is across sources.

[● 3 SOURCES] The General Directorate of Public Finances (DGFiP) confirmed a cyberattack affecting approximately 678,000 taxpayers. bitcoinethereumnews.com · www.bvoltaire.fr · news.bitcoin.com
[● 2 SOURCES] The attacker used sophisticated methods, testing access in small volumes to avoid detection. www.bvoltaire.fr · news.bitcoin.com
[● 2 SOURCES] Chainalysis recorded 30 crypto-related 'wrench attacks' in France during the first half of 2026, totaling over $30 million in losses. bitcoinethereumnews.com · abmedia.io
[○ 1 SOURCE] The Director General of the tax administration, Amélie Verdier, stated the compromise occurred in June via a stolen employee account. www.bvoltaire.fr
[○ 1 SOURCE] The DGFiP plans to contact affected individuals and professionals directly via email or post next week. news.bitcoin.com

Timeline

about 9 hours ago

[TECHNOLOGY] 6 sources
France tax authority breach exposes 678,000 taxpayers' data
A cyberattack on France’s tax authority (DGFiP) has exposed the personal and financial data of 678,000 taxpayers, raising fears of targeted physical attacks against wealthy cryptocurrency holders.
2 days ago

[TECHNOLOGY] 39 sources
DGFiP cyberattack exposes tax data of 678,000 French taxpayers
The French tax authority (DGFiP) confirmed a June 2026 cyberattack that exposed the tax and personal data of approximately 678,000 individuals and professionals, including many high-income earners.

Sources

1001infos.net · 24matins.fr · 7fm.be · abmedia.io · aktivni.si · arenapublica.com · bitcoinethereumnews.com · bvoltaire.fr · caszazemljo.si · coincu.com · coinedition.com · compartir-tecnologias.es · crime-nieuws.nl · cryptoast.fr · dartsnmore.com · DNA.fr · eco.sapo.pt · economiematin.fr · fr.news.yahoo.com · humanite.fr · igen.fr · ipreunion.com · it-boltwise.de · journaldunet.com · lci.fr · ledemocratedebergerac.fr · lesinguliersete.fr · m.huffingtonpost.fr · motorsiden.dk · news.bitcoin.com · newsweek.ro · nextplz.fr · notretemps.com · planet.fr · policeetrealites.com · pplware.sapo.pt · prensa-latina.cu · republicain-lorrain.fr · spotmedia.ro · sudradio.fr · thepostonline.nl · vosgesmatin.fr · zataz.com

This summary has been updated 1 time: see revision history