Massive Cyberattack Exposes Data of 700,000 French Taxpayers

• •700,000 taxpayer records compromised in a cyberattack on France's DGFiP.
• •Hacker 'ZeroBytes' claimed responsibility, using stolen credentials and MFA bypass.
• •Ongoing investigations to assess the full impact and notify affected individuals.

In late June 2026, a cyberattack on France's General Directorate of Public Finances (DGFiP) compromised the data of approximately 700,000 taxpayers. The breach was confirmed by the French Finance Ministry on August 13, 2026, after a hacker known as 'ZeroBytes' claimed responsibility and advertised the stolen data on a cybercrime forum. The attack reportedly involved the exploitation of stolen credentials and an MFA bypass technique, allowing unauthorized access to sensitive taxpayer information, including names, addresses, and income details. Initial reports indicated that 70 gigabytes of data were extracted, with the potential for further exposure of sensitive banking information. The Ministry is conducting investigations to assess the full scope of the breach and notify affected individuals. This incident follows a series of cyberattacks on French public sector entities earlier in the year, highlighting ongoing vulnerabilities in national cybersecurity.