GoKawiilFrench tax agency DGFiP confirms data breach affecting 678,000 taxpayers
France's General Directorate of Public Finances (DGFiP) confirmed that hackers accessed a file containing 678,000 records of individuals and businesses, including names, family quotients, reference tax income and withholding tax rates. Some leaked samples also reportedly included addresses, phone numbers, emails and dependent counts. The attacker's access was cut off in late June, but the breach itself was only discovered in mid-August after the stolen data appeared for sale online.
GoKawiil's interpretation of the reporting above, not reported fact.
The months-long gap between the intrusion and its detection highlights serious weaknesses in France's ability to monitor sensitive government data systems in real time. With a second breach already claimed against cadastral records affecting over two million people, the incident raises broader concerns about the resilience of French state cybersecurity infrastructure following earlier breaches like the ANTS hack.
- DGFiP confirmed a breach exposing tax and personal data of 678,000 people.
- The intrusion was stopped in June but not detected until data appeared for sale in August.
- The same hacker claims a second breach of cadastral data affecting over two million people.
Yubico YubiKey 5 NFC Security Key — When a national tax agency leak puts personal data in the wild, phishing attempts follow — and a hardware key is the strongest way to lock down your own accounts. The YubiKey 5 NFC plugs into USB-A or taps on your phone via NFC to confirm logins on services that support FIDO2 and 2FA. It's a small, pocketable piece of hardware that makes stolen passwords far less useful to attackers.
See Yubico YubiKey 5 NFC Security Key on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: cybernetica.fr, 2026-08-25
Published there as: “France's tax agency got hacked (in French)”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.