At the end of June, the French tax administration’s information system was the subject of an “illicit access” that allowed access and extraction of data from private and professional individuals, the Ministry of Economic Affairs revealed.
© Shutterstock
14/08/2026
by
Lusa
“ On Wednesday, a malicious agent claimed illegitimate access to the information system of the Directorate-General for Public Finance (DGFiP), which occurred at the end of June 2026, following an identity usurpation,” the French ministry said.
“ The first investigations confirm that access, which had been blocked at the end of June in the context of the verification carried out, allowed, however, the consultation and extraction of data relating to individuals and professionals”, adds the statement.
No order of magnitude of the number of victims is specified.
The specialized French Breaches website, which documents cyberattacks in France, said today that 678.437 people were affected, of which 392,867 private and 285,570 professionals, later stating on X that the file would now be on sale for several thousand euros.
According to the Ministry’s statement, “the affected users will receive an individual notification specifying the data that may have been consulted or extracted and, where appropriate, the precautionary measures to be taken”.
A French Breaches official told AFP that “a new leak related to DGFiP2 was claimed, this time involving “about 2 million owners of real estate and land in France”.
“The pirate claims to have names, dates of birth, addresses, land identifiers, registration plots and information about the goods held”, and to have “still access to the account of DGFiP”, according to French Breaches, whose “site” was momentarily unavailable.