France’s tax authority says hackers got into its systems and copied data belonging to individuals and businesses. The Economy Ministry said the intrusion hit the Directorate General of Public Finances (DGFiP) in late June after someone’s identity was stolen or misused, letting the attacker access internal systems and extract data. A hacker using the name ZeroBytes claims more than 600,000 records were taken, including names, tax IDs, email addresses, family details, and tax-status information, though that scope has not been independently verified.
Why it matters: Tax-agency data can be used for identity theft, tax fraud, and highly convincing phishing or impersonation attacks. People and businesses notified by DGFiP should watch for scams, review tax-related accounts and correspondence, and treat unsolicited messages referencing tax details with extra caution.
2026.08.20
98% relevant
This directly updates the same DGFiP breach by refining the affected count to about 600,000, specifying that slightly more than 350,000 individuals and about 250,000 businesses or professionals were affected, and adding that message lists and the full contents of about 250 taxpayer messages may have been stolen.
Ionut Arghire
2026.08.17
98% relevant
This article updates the same DGFiP breach with a firmer impact figure of about 678,000 affected individuals and added detail that attackers used compromised employee and third-party credentials to access systems in June and July and steal tax, company, and cadastral data.
Sergiu Gatlan
2026.08.17
98% relevant
This directly updates the same DGFiP breach, adding the confirmed impact count of 678,000 individuals and professionals, the types of data accessed and extracted, the forum sale claim by ZeroBytes, and the French ministry's response and notification plans.
2026.08.14
98% relevant
This article updates the same DGFiP breach with more concrete details: the intrusion happened in late June, the alleged seller 'ZeroBytes' claimed about 2 million taxpayer records, said stolen credentials and an MFA-bypass technique were used, and DGFiP said the access had been cut off by the end of June and disputed the claim of ongoing access.
2026.08.14
100% relevant
This article appears to be the initial disclosed story about the late-June breach of France’s Directorate General of Public Finances, with official confirmation of unauthorized access and data extraction.
← Back to all stories