[CLSTR]
< Back to situations

Monitor this situation.

[SITUATION] · [ACTIVE] · [TECHNOLOGY]

2 clusters · 50 sources · 3 days · First seen · Last updated

French tax authority and FICOBA data breach

Overview

In mid-August 2026, the French General Directorate of Public Finances (DGFiP) confirmed a major cyberattack that occurred between late June and early July. The breach, facilitated by the identity theft of an employee, resulted in the unauthorized extraction of sensitive data belonging to approximately 678,000 individuals and businesses.

Stolen information includes names, birthdates, addresses, phone numbers, email addresses, family status, and fiscal details such as taxable income and withholding tax rates. The breach notably affects high-income earners, including over 28,000 people earning more than €100,000 and approximately 400 earning over €1 million. Officials have described the incident as more sophisticated than previous attacks.

In a related development, the national bank-account register, FICOBA, was also compromised. Investigators report that an attacker used the credentials of a government official from outside the tax authority to access roughly 1.2 million accounts, allowing for the consultation of identifiers such as IBANs.

Security experts have raised alarms regarding the potential for identity theft and targeted scams. There is specific concern for cryptocurrency investors, as the leaked financial data could facilitate ‘wrench attacks’—violent physical crimes used to extort digital assets—by helping criminals link real-world identities to significant digital holdings.

The Paris prosecutor's office has launched a formal investigation into the fraudulent extraction and potential criminal association, tasking the Office anticybercriminalité (Ofac) with the case. The DGFiP has apologized and stated it is taking measures to secure its systems.

Entities

France · Amélie Verdier · Direction Générale des Finances Publiques · Bercy · Office anticybercriminalité

Claims

What the coverage asserts, and how well corroborated each claim is across sources.

Timeline

  1. about 9 hours ago

    [TECHNOLOGY] 10 sources
    French tax authority data breach affects 678,000 users

    A major cyberattack on the French tax authority has exposed the personal and business data of 678,000 users, prompting a criminal investigation and raising fears of targeted crypto-related extortion.

  2. 3 days ago

    [TECHNOLOGY] 44 sources
    France tax authority suffers cyberattack exposing 678,000 taxpayers

    France's tax authority (DGFiP) confirmed a cyberattack in June 2026 that compromised the data of approximately 678,000 taxpayers, exposing sensitive personal and financial information.

Sources

1001infos.net · 24matins.fr · 7fm.be · abmedia.io · actu.fr · aftabnews.ir · aktivni.si · arenapublica.com · bitcoinethereumnews.com · bvoltaire.fr · caszazemljo.si · coincu.com · coinedition.com · cointrust.com · compartir-tecnologias.es · crime-nieuws.nl · cryptoast.fr · dartsnmore.com · DNA.fr · eco.sapo.pt · economiematin.fr · fr.news.yahoo.com · humanite.fr · igen.fr · information.tv5monde.com · ipreunion.com · it-boltwise.de · journaldunet.com · la-croix.com · lci.fr · ledemocratedebergerac.fr · lesinguliersete.fr · livecoins.com.br · m.huffingtonpost.fr · motorsiden.dk · news.bitcoin.com · newsweek.ro · nextplz.fr · notretemps.com · planet.fr · policeetrealites.com · pplware.sapo.pt · prensa-latina.cu · republicain-lorrain.fr · spotmedia.ro · sudradio.fr · thepostonline.nl · valeursactuelles.com

This summary has been updated 1 time: see revision history