Therecord.Media Arrests Made in Major Cyberattack on French Tax Authority
Article Content
- •An 18-year-old suspect, 'ChatNoir', arrested for hacking French tax systems.
- •ZeroBytes hacking group claimed responsibility for stealing data from over 600,000 individuals.
- •The attack prompted government crisis meetings and public apologies from officials.
French authorities arrested an 18-year-old, known as 'ChatNoir', for involvement in cyberattacks against the tax authority and other organizations. The attacks, attributed to the ZeroBytes hacking group, resulted in the theft of personal data from over 600,000 individuals. The suspect was detained on August 18, 2026, and charged with unauthorized access to data systems and data theft. Another suspect, under 16, was arrested but released pending investigation. The attacks began in mid-July 2026, with the tax authority confirming a data breach on August 13. The breach allowed unauthorized access to sensitive taxpayer information, prompting a government crisis meeting and public apology from officials. The 18-year-old has a history of cybercrime, previously linked to attacks on major media outlets and a telecommunications provider. Prosecutors are pursuing multiple charges against him, with potential penalties including up to 10 years in prison.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (4)
Following this threat?
Track Bfm-tv in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…
Korean-speaking Hackers Target PHP Vulnerabilities in Global Campaign A cybersecurity report from Cyfirma reveals that attackers, possibly linked to North Korea's Lazarus group, are preparing to exploit critical vulnerabilities in PHP (CVE-2026-109618 and CVE-2026-109619). These vulnerabilities allow unauthenticated remote code execution, posing a significant threat to government…