A massive data breach at the French tax authority has left 678,000 individuals exposed, with sensitive financial and personal information potentially compromised. The attack, which was announced on August 12, is just the latest in a string of cyberattacks to hit French government agencies this year.
According to the French Finance Ministry, an attacker using the handle “ZeroBytes” claimed responsibility for the breach and listed a stolen database for sale on a hacking forum called PwnForums. The ministry confirmed that the breach was extensive, with data belonging to 678,000 individuals and professionals accessed through the General Directorate of Public Finances (DGFiP) systems. This includes sensitive tax information such as reference tax income, family quotient, and withholding tax rate, as well as business data like company names and SIREN numbers.
The breach also involved the Serveur Professionnel de Données Cadastrales (SPDC), an online platform operated by the French tax authority that provides access to the country’s central land registry and property ownership records. While ZeroBytes claims to have accessed data on approximately 20 million French citizens, they only managed to steal 252,149 records containing information on over 2 million people.
The attack highlights the ongoing threat of cybercrime to government agencies and sensitive data. The fact that an attacker was able to breach the system and access so much sensitive information is a concern for anyone who has dealings with the French tax authority. It also raises questions about the effectiveness of security measures in place at the agency.
What’s particularly worrying is that this is not an isolated incident. In recent months, multiple French government agencies have been hit by cyberattacks and data breaches. In January, the national employment agency France Travail was fined €5 million after hackers stole the personal information of 43 million people. Just a month later, the French Ministry of Finance disclosed another data breach affecting over 1.2 million user accounts.
The French Finance Ministry has stated that they will be contacting all affected individuals starting next week via email or letter, with details on what data may have been accessed or stolen and necessary precautions to take. This is a crucial step in mitigating the impact of the breach, but it also highlights the need for stronger security measures at government agencies.
For individuals who are affected by this breach, it’s essential to be vigilant about monitoring their financial accounts and credit reports for any suspicious activity. It’s also a good idea to change passwords and enable two-factor authentication on all online accounts to prevent potential identity theft.
In conclusion, the data breach at the French tax authority serves as a stark reminder of the ongoing threat of cybercrime and the need for robust security measures in place at government agencies. As more cases like this come to light, it’s essential that individuals take steps to protect themselves from potential identity theft and financial loss.
Source: Bleeping Computer — 2026-08-17