French Tax System Breached, Data from 678,000 Accounts Extracted

Overview

• In late June 2026 an unauthorized access to the Directorate General of Public Finances (DGFiP) systems allowed the consultation and extraction of data tied to about 678,000 individual and professional accounts.
• Stolen items for private taxpayers include names, addresses, number of tax shares, the revenu fiscal de référence and withholding rates, and the breach also exposed roughly 200,000 cadastral records and professional identifiers such as SIREN numbers.
• A threat actor using the handle ZeroBytes publicly claimed the theft and third‑party trackers and French Breaches report the dataset is being offered for sale on criminal forums.
• The administration says it cut the compromised access in June, has notified CNIL, will contact affected users directly, and the Parquet de Paris has opened a judicial probe that was delegated to the Office anticybercriminalité while ANSSI and other state cyber teams continue technical forensics.
• Security experts and police unions warn the aggregated fiscal data raise acute risks of targeted fraud, identity theft and physical crimes, and critics say the weeks‑long delay between detection and public disclosure highlights gaps in state cyber reporting and defenses.