France’s tax authority says hackers got into its systems and copied data belonging to individuals and businesses. The Economy Ministry said the intrusion hit the Directorate General of Public Finances (DGFiP) in late June after someone’s identity was stolen or misused, letting the attacker access internal systems and extract data. A hacker using the name ZeroBytes claims more than 600,000 records were taken, including names, tax IDs, email addresses, family details, and tax-status information, though that scope has not been independently verified.
info@thehackernews.com (The Hacker News)
2026.09.29
96% relevant
This appears to be the same DGFiP tax-system breach and adds specific intrusion details, including that attackers used stolen staff passwords and remained undetected for seven weeks.
2026.09.08
96% relevant
This updates the same underlying DGFiP tax-authority breach by adding that French prosecutors arrested an 18-year-old suspected ZeroBytes member and a second minor, and by linking the intrusion to the ZeroBytes campaign and additional targeted organizations.
2026.08.20
98% relevant
This directly updates the same DGFiP breach by refining the affected count to about 600,000, specifying that slightly more than 350,000 individuals and about 250,000 businesses or professionals were affected, and adding that message lists and the full contents of about 250 taxpayer messages may have been stolen.
Ionut Arghire
2026.08.17
98% relevant
This article updates the same DGFiP breach with a firmer impact figure of about 678,000 affected individuals and added detail that attackers used compromised employee and third-party credentials to access systems in June and July and steal tax, company, and cadastral data.
Sergiu Gatlan
2026.08.17
98% relevant
This directly updates the same DGFiP breach, adding the confirmed impact count of 678,000 individuals and professionals, the types of data accessed and extracted, the forum sale claim by ZeroBytes, and the French ministry's response and notification plans.
2026.08.14
98% relevant
This article updates the same DGFiP breach with more concrete details: the intrusion happened in late June, the alleged seller 'ZeroBytes' claimed about 2 million taxpayer records, said stolen credentials and an MFA-bypass technique were used, and DGFiP said the access had been cut off by the end of June and disputed the claim of ongoing access.
2026.08.14
100% relevant
This article appears to be the initial disclosed story about the late-June breach of France’s Directorate General of Public Finances, with official confirmation of unauthorized access and data extraction.