France’s tax administration has acknowledged a cybersecurity incident that allowed unauthorized access to sensitive taxpayer records. The breach, which occurred in late June 2026, involved the extraction of personal and financial data belonging to both individuals and businesses.
The French Ministry of the Economy and the Direction générale des Finances publiques (DGFiP) confirmed that a malicious actor gained entry through identity theft.
Investigators determined that the unauthorized access enabled the consultation and extraction of data before it was detected and terminated during an internal audit at the end of June.
Following the public claim of responsibility on August 12, additional restrictions were promptly implemented to block further unauthorized activity.
Officials stated that investigations remain ongoing to establish the precise volume and nature of the compromised information.
Later updates from the DGFiP indicated that approximately 678,000 individuals and professionals were affected.
For private taxpayers, the exposed details typically include names, family quotient information, reference taxable income, and withholding tax rates.
Professional records generally involve less sensitive, often already public data such as company identifiers.
Affected users will receive personalized notifications outlining the specific data involved and recommended protective measures.
The DGFiP has notified France’s data protection authority (CNIL), intends to file a formal complaint, and continues to work with cybersecurity agencies including ANSSI.
The timing of the disclosure has heightened attention within cryptocurrency circles.
France has experienced a notable rise in violent “wrench attacks,” in which criminals use physical force, threats, or kidnapping to coerce victims into transferring digital assets.
Analytics firms have recorded dozens of such incidents in the country during the first half of 2026, with substantial sums stolen.
While the leaked tax records do not explicitly identify cryptocurrency holdings, the combination of high-income indicators, addresses, and contact details could assist criminals in identifying potential targets.
Security experts advise heightened vigilance against phishing and social engineering attempts that may leverage the stolen information.
Crypto holders are encouraged to strengthen physical security, limit public exposure of personal details, and consider protective wallet configurations resistant to coercion.
The incident highlights ongoing challenges in safeguarding government data systems and the particular risks faced by individuals whose wealth exists in easily transferable digital form. Authorities continue probing the full extent of the breach and have pledged further updates as the inquiry progresses.
