# French tax authority data breach exposes 680,000 taxpayers Hackers infiltrated France's tax system, stealing sensitive information of hundreds of thousands of individuals and businesses. - **Source:** [Hacker News: Front Page](https://brifing.si/source/b07aa772-b1a0-4a76-aa18-719c6f9e2dde) - **Published:** 2026-08-14 - **Topic:** [Finance](https://brifing.si/c/finance) - **Original article:** - **On Brifing:** https://brifing.si/s/fe65089d-bb5a-4c25-8147-e0705d0f567a ## Large-scale data breach A hacker named ZeroBytes claimed on a cybercrime forum to have stolen 680,000 rows of data from French Ministry of Finance systems. The compromised data includes names, birth dates, addresses, and property information of 390,000 individuals and 285,000 businesses. The ministry confirmed the claim a day later but revealed the attack actually occurred on June 26 and was detected at that time. ## Infiltration method The hacker claims to have moved from server to server before breaching the tax authority's VPN system for remote network access. Official statements describe this as 'unauthorized access through phishing'. While passwords and banking details weren't stolen, the personal information obtained is sufficient for identity theft. ## Second leak allegation Another alleged data leak circulating on the same forums claims approximately 2 million property owners' information was compromised. This claim hasn't been officially confirmed yet. ANSSI (France's National Cybersecurity Agency) is investigating while CNIL (Data Protection Authority) has been notified as required by law. ## Tax authority's security history This marks the French tax system's second major data breach this year. Between late January and mid-February, hackers accessed 1.2 million bank accounts in the FICOBA database using a compromised employee's credentials. Two major breaches in one year highlight systemic vulnerabilities. ## Public warnings Authorities warned citizens about emails, texts, and calls pretending to be from the tax office. Particular caution is advised against fake communications that establish trust by accurately citing personal information. Correct address and birth date details no longer verify message authenticity. ## Victims' situation It remains unclear when the 680,000 victims will be notified. French law mandates reporting breaches to authorities within 72 hours but sets no deadline for victim notifications. This delay hampers victims' ability to take timely identity theft precautions. ## Sector impacts French financial institutions, particularly banks and insurers, have begun implementing enhanced authentication measures. Fintech company stocks have shown declines. Experts note such breaches undermine trust in the digital economy and may lead to tighter regulations. ## Global cybersecurity lessons This incident underscores the critical importance of government cybersecurity infrastructure, especially for tax and finance systems. Governments worldwide are reviewing defenses against similar attacks. With the average cost of a data breach at $4.45 million, preventive investments prove crucial. ## Sources covering this story - https://korben.info/en/france-tax-authority-data-breach-680000-taxpayers.html — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._