Ethical Hacking News
French tax authority DGFiP has confirmed a major cybersecurity breach that exposed the data of approximately 600,000 individuals, including some private messages. The incident has raised concerns about the security measures in place and the potential consequences for the affected individuals.
The French tax authority, DGFiP, has experienced a major cybersecurity breach, exposing data of approximately 600,000 individuals. The breach was allegedly carried out by a cybercriminal known as "ZeroBytes," but the actual number of affected individuals is significantly lower, at around 600,000. The exposed data included personal and tax information, such as contact details, household finances, and tax identification numbers. The breach also exposed details from around 250 businesses and professionals, including company names and SIREN numbers. The incident highlights the need for improved cybersecurity measures in the French public sector. The DGFiP has notified affected taxpayers and warned of potential phishing attempts, emphasizing the importance of cybersecurity awareness.
The French tax authority, DGFiP, has been embroiled in a major cybersecurity crisis after a break-in exposed the data of approximately 600,000 individuals, including some private messages. The incident has raised concerns about the security measures in place and the potential consequences for the affected individuals.
According to the DGFiP, the breach was discovered after the alleged cybercriminal behind the attack, known as "ZeroBytes," claimed to have stolen data belonging to over 2 million individuals. However, the French tax authority has revealed that the actual number of affected individuals is significantly lower, at around 600,000. This discrepancy has not been explained by the authority.
The data that was exposed during the breach included personal and tax information, such as contact details, household finances, and withholding rates. Additionally, lists of messages exchanged with the authority were also compromised, affecting around 250 people. The affected data also included tax identification numbers, marital status, email and postal addresses, and phone numbers.
The breach has also exposed details such as household composition, number of dependents, family quotient, reference tax income, and withholding rates. For approximately 250,000 businesses and professionals, the affected data was limited to company names and SIREN numbers, the unique nine-digit identifiers assigned to French businesses.
The DGFiP has notified affected taxpayers by email or post and warned that criminals could use the stolen details to make phishing attempts appear more convincing. The authority has also highlighted the importance of being cautious when receiving unsolicited messages or emails.
Furthermore, the incident has highlighted the need for improved cybersecurity measures in the French public sector. In recent years, France has experienced a number of high-profile cybersecurity breaches, including an attack on the finance ministry's database, which affected 1.2 million people, and an attack on the Health Ministry's database, which affected 15.8 million individuals.
The DGFiP's latest FAQ pegs the total number of affected parties at roughly 600,000, which is lower than the 678,000 "individuals and professionals" DGFiP said were affected last week. The authority did not provide an explanation for the discrepancy.
The incident has also led to the discovery of a technical vulnerability in the government's Vacant Successions Portal (PSV), which is used to search for estates without known heirs. The DGFiP suspended the service after discovering the flaw, and an investigation is ongoing to determine whether personal data had leaked.
The breach has also raised concerns about the potential consequences for individuals and businesses affected by the incident. The French tax authority has assured taxpayers that it would never ask for sensitive information such as PINs or identity documents by phone, text message, or email, and would request such material only through its secure portal.
In light of this incident, it is essential to emphasize the importance of cybersecurity awareness and the need for individuals and organizations to take proactive measures to protect their sensitive information. The French tax authority's cybersecurity crisis serves as a reminder of the need for robust security measures to prevent such breaches from occurring in the future.
Related Information:
https://www.ethicalhackingnews.com/articles/The-French-Tax-Authoritys-Cybersecurity-Crisis-A-Breach-of-Enormous-Proportions-ehn.shtml
https://www.theregister.com/security/2026/08/20/french-tax-authority-says-break-in-exposed-data-of-600k-including-some-private-messages/5290249
Published: Thu Aug 20 10:35:13 2026 by llama3.2 3B Q4_K_M
