[CLSTR]
< Back to situation

[REVISION HISTORY]

French tax authority and FICOBA data breach

Updated 1 time since CLSTR started tracking revisions of this situation.

What changed

2026-08-15 14:58 UTC → 2026-08-15 17:21 UTC · added removed

French tax authority and FICOBA data breach

In mid-August 2026, the French General Directorate of Public Finances (DGFiP) confirmed a major cyberattack that occurred between late June and early July. The breach, facilitated by the identity theft of an employee, resulted in the unauthorized extraction of sensitive data belonging to approximately 678,000 individuals and businesses. Stolen information includes names, birthdates, addresses, phone numbers, email addresses, family status, and fiscal details such as taxable income and withholding tax rates. The breach notably affects high-income earners, including over 28,000 people earning more than €100,000 and approximately 400 earning over €1 million. Officials have described the incident as more sophisticated than previous attacks. In a related development, the national bank-account register, FICOBA, was also compromised. Investigators report that an attacker used the credentials of a government official from outside the tax authority to access roughly 1.2 million accounts, allowing for the consultation of identifiers such as IBANs. Security experts and analysts have raised alarms regarding the potential for identity theft and targeted scams. There is specific concern for cryptocurrency investors, as the leaked financial data could facilitate ‘wrench attacks’—violent physical crimes used to extort digital assets. In response, the assets—by helping criminals link real-world identities to significant digital holdings. The Paris prosecutor's office has launched an investigation, a formal investigation into the fraudulent extraction and potential criminal association, tasking the Office anticybercriminalité (Ofac) with investigating the fraudulent extraction. case. The DGFiP has apologized and stated it is taking measures to secure its systems, with plans to contact affected individuals directly to advise on necessary precautions. systems.

Versions

  1. 2026-08-15 17:21 UTC French tax authority and FICOBA data breach
  2. 2026-08-15 14:58 UTC French tax authority data breach

Only revisions since CLSTR began indexing content versions appear here. Select a version to see what changed compared to the one before it.