Redpacketsecurity France Launches REACTIV Cyber Incident Response Unit Amid Major Tax Authority Breach
Article Content
- •France's ANSSI has launched REACTIV to bolster government cybersecurity.
- •The initiative follows a major breach affecting up to 678,000 taxpayers' data.
- •REACTIV allows ANSSI to enforce immediate data protection measures across ministries.
France's national cybersecurity agency, ANSSI, has established a new cyber incident response unit called REACTIV to enhance the protection of sensitive data within government ministries. Announced on September 7, 2026, REACTIV aims to empower ANSSI with the ability to mandate immediate protective measures from ministries during cyber incidents. This initiative follows a significant breach of the Directorate-General for Public Finance, which exposed personal data of approximately 350,000 to 678,000 taxpayers. The breach led to the arrest of two individuals linked to the hacking group 'ZeroBytes.' However, details regarding the human and financial resources allocated to REACTIV remain undisclosed, raising concerns about its effectiveness. The unit will also centralize crisis communications during cyberattacks affecting state services.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track Jadepuffer, Lazarus and DGFiP in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
AI-Driven Cyber Attacks Surge, Microsoft Reports Microsoft's 2026 Digital Defense Report reveals that threat actors are leveraging AI to accelerate the discovery and exploitation of vulnerabilities, with the median time from vulnerability discovery to weaponization dropping below 24 hours. The report indicates that the number of tracked CVEs for 2026 is expected to… 
Lazarus APT Launches Operation FlashHole Using AI and Post-Quantum Cryptography Kaspersky has identified a cyberespionage campaign, dubbed Operation FlashHole, attributed to the Lazarus APT group, active since July 2025. The campaign has targeted at least three organizations in South Korea's construction, software, and wire-communication sectors. Attack methods include spear-phishing emails…