Personal and tax details of 678,000 individuals in France were compromised after a cyberattack targeting the Directorate General of Public Finances (DGFIP) between June and July, officials confirmed last Thursday. This incident followed the unauthorized use of credentials belonging to a DGFIP agent and an external third party.
Scope of the Data Leak
DGFIP, the French government body responsible for taxes and public finance management, stated that the stolen data includes sensitive financial information such as reference tax income, family quotient, and withholding tax rates. Media reports indicated that the hackers also extracted names, email addresses, phone numbers, and home addresses.
The agency reported that nearly 27,000 of those affected declared annual incomes exceeding €100,000. Among them, 386 individuals had reported more than €1 million, and eight had declared over €10 million in income. Investigators believe the compromised database is being sold on illicit marketplaces on the dark web.
| Affected Group | Number of Individuals |
|---|---|
| Total impacted | 678,000 |
| Declared income ≥ €100,000 | 26,900 |
| Declared income ≥ €1 million | 386 |
| Declared income ≥ €10 million | 8 |
Growing Concern Over Crypto-Related Attacks
The breach comes amid a surge in violence targeting cryptocurrency holders in France. Chainalysis, a company specializing in blockchain analytics, identified 30 publicly reported violent crypto thefts in France during the first half of 2026. Losses from these incidents have already exceeded $30 million, positioning this year to surpass the country’s 2025 record of $58 million lost to such crimes.
ETH
SOL
BSC
ROBINHOOD
USDT
AAPLJameson Lopp, an independent Bitcoin security researcher known for maintaining a public record of physical attacks on cryptocurrency holders, commented on X that this data leak further endangers bitcoin owners in France, where such attacks are increasingly frequent.
Jameson Lopp noted that the leak represents yet another setback for bitcoin holders in France, as the country continues to grapple with a rising number of violent attacks targeting individuals with significant cryptocurrency assets.
Mini dictionary: Chainalysis, a blockchain analysis and investigation firm, provides intelligence solutions to governments, exchanges, and financial institutions to track and prevent illicit cryptocurrency activities.
Separate Data Leak at Trezor Shipping Provider
The DGFIP incident coincided with another privacy breach disclosed the same week. Trezor, a company specializing in hardware wallets for securing cryptocurrencies, revealed that its shipping partner ShipMonk suffered a data breach on Wednesday. This event exposed customer records for roughly 14,000 buyers, including verified names, phone numbers, and delivery addresses for 11,742 individuals. The breach effectively revealed a list of hardware wallet owners and their physical locations.
These attacks highlight the increasing risks associated with both digital and physical attacks on cryptocurrency users and high-net-worth individuals in France.
