Overview
- Two intrusions into the Direction générale des finances publiques systems in late June and late July have led the DGFiP to confirm the theft of data tied to at least 678,000 taxpayers and professionals.
- Stolen records include names, fiscal identifiers, revenue fiscal de référence, quotient familial, source tax rates and company SIREN numbers while the DGFiP says account passwords and direct access to impots.gouv.fr were not exposed.
- A self‑identified duo calling itself ZeroBytes claims responsibility and says portions of the files were sold on the dark web but those sales and price figures are unverified by authorities.
- The Paris public prosecutor's cyber section opened a judicial inquiry with the Office anticybercriminalité leading the probe, the prime minister convened a crisis cell and ANSSI has been ordered to carry out a detailed technical audit.
- Officials have begun individually notifying victims and warned of higher risks of targeted phishing and identity fraud as the breach's scope keeps growing, with a newly reported third leak and revised cadastral exposures prompting calls for a parliamentary inquiry.