Particle.news

Massive Hack Hits French Tax Authority, 678,000 Users Exposed

The probe and government crisis response aim to notify affected people, secure systems and determine whether repeated intrusions reveal common vulnerabilities.

Overview

  • The Direction générale des finances publiques (DGFiP) has confirmed two intrusions that together exposed personal and fiscal records for about 678,000 individuals and businesses and said notifications to victims will begin on Monday.
  • For private taxpayers the leaked fields include names, quotient familial, revenu fiscal de référence and withholding rates while business records show identifying numbers and addresses.
  • The Paris cyber section has opened a criminal investigation for extraction of data and association de malfaiteurs and has entrusted inquiries to the Office anticybercriminalité (OFAC).
  • Prime Minister Sébastien Lecornu will chair an interministerial crisis cell to coordinate the response, Matignon has notified the CNIL and ordered an audit of DGFiP IT security with operational measures to be presented in September.
  • Claimed access by an actor calling itself ZeroBytes and screenshots posted on French Breaches suggest a larger haul but those assertions remain unverified and investigators are examining their scope while lawmakers press for a parliamentary inquiry and stronger cyber defenses.