French Tax Authority Data Breach Impacts 678,000 Individuals and Businesses
Brief
France’s tax authority, the Direction générale des Finances publiques (DGFiP), has disclosed a data breach affecting approximately 678,000 individuals and businesses after attackers gained unauthorized access to its information systems using impersonated credentials.
The French Ministry of Economy and Finance announced on August 14 that the intrusions occurred in June and July 2026. A malicious actor claimed responsibility for the access on August 12 and 13, prompting a deeper investigation into the incident’s scope and consequences.
According to DGFiP, the attackers accessed internal systems by impersonating the credentials of both a DGFiP employee and an authorized third party. The authority said it immediately disabled all accounts associated with the identified incidents after detecting the intrusions.