# Massive Breach at French Tax Authority Exposes Sensitive Data of Hundreds of Thousands

*Published August 19, 2026*
*Source: [https://cybersecuritynews.com/french-tax-authority-data-breach/](https://cybersecuritynews.com/french-tax-authority-data-breach/)*

## Executive Summary

The French tax authority DGFiP has experienced a data breach affecting 678,000 individuals and businesses due to credential misuse. Sensitive tax and property data were accessed, though online accounts remain secure, and precautionary notifications are forthcoming.

## Article

The French tax authority, known as the Directorate General of Public Finances (DGFiP), has suffered a significant data breach impacting the personal and corporate information of approximately 678,000 individuals and businesses. This breach was made possible through the misuse of credentials belonging to a DGFiP employee and an authorized third party. The breach was officially disclosed on August 14, 2026, following a claim of responsibility by a malicious actor just days earlier.

The unauthorized access took place in June and July 2026, but it was only after the claims of intrusion emerged in August that a comprehensive forensic investigation was launched. DGFiP responded by swiftly disabling all compromised accounts upon detecting unauthorized logins. Initial assessments of the incident did not immediately identify the theft of data due to the sophisticated nature of the attack.

Further investigations revealed that the attackers had accessed and extracted tax-related and property data before the accounts were disabled. The compromised data includes personal tax information such as reference tax income, family quotient details, and withholding tax rates. For businesses, data accessed may include company names and SIREN registration identifiers. Additionally, cadastral details like property addresses and the surface area of real estate were involved.

Importantly, the DGFiP assured that taxpayers' online accounts were not breached, nor were personal and business usernames and passwords exposed, minimizing the risk of direct account takeovers. However, the stolen data remains valuable, potentially being leveraged for phishing, identity fraud, tax scams, and social engineering attacks. Cybercriminals could use details of a victim’s tax status or income to impersonate government or financial entities convincingly.

In response to the breach, DGFiP informed France’s data protection authority, CNIL, and enhanced security measures were put in place, including preventive disconnections from sensitive systems. The agency is collaborating with national cybersecurity bodies to assess the breach's full scope. Notifications to affected parties will begin the following week, detailing the accessed data and advising on precautionary measures. DGFiP also plans to file a criminal complaint and keep the public informed as the investigation unfolds.

Individuals affected by this breach are advised to be cautious of unsolicited tax communications, refrain from clicking on links in unexpected messages, and verify any requests through official channels.