French Tax Agency Admits Data Breach as Hacker Steals 678k Records

Analysis
This data breach at France's General Directorate of Public Finances (DGFiP) marks a significant escalation in the security risks facing crypto holders, as the stolen taxpayer records could be leveraged to identify and target individuals known to hold digital assets. The attack, attributed to a pseudonymous hacker named Zerobytes who reportedly exploited an internal VPN search tool, resulted in the theft of 678,438 contributor records that are now being sold for a few thousand euros. The DGFiP's admission that its access controls failed to detect the data exfiltration underscores the sophistication of the intrusion and raises questions about the adequacy of current security protocols at French government institutions. The incident amplifies existing concerns about "wrench attacks" in France, particularly following a prior case where a tax official allegedly sold data on high-profile crypto holders. Key developments to watch include the DGFiP's individual notifications to affected taxpayers, any additional disclosures about the scope of compromised data, and whether this breach prompts regulatory or legislative action on personal data collection in the crypto space.

If you have any feedback or questions about this content, please contact us at crypto.news@kcex.com

The post French Tax Agency Admits Data Breach as Hacker Steals 678k Records appeared on BitcoinEthereumNews.com.

Massive 678K Taxpayer Data Breach Worries French Crypto Holders A new threat has arisen in France for cryptocurrency holders, as threat actors have accessed personal information of a large number of taxpayers. A pseudonymous hacker identified as Zerobytes managed to steal data from 678,438 contributors extracted from the General Directorate of Public Finances’ (DGFiP) site. According to local reports, the attacker claims that he compromised internal servers by using an internal search VPN tool. The criminal, who would also be involved in previous attacks on French institutions, had their access cut off and was unable to recover all of the DGFiP contributor data. Nonetheless, the file is being sold for a few thousand euros to those interested. The DGFiP acknowledged the attack had happened on June 12, stressing that it “immediately interrupted access to all accounts used in the identified incidents,” but that “access controls carried out on this occasion failed to detect that these intrusions had led to data theft, due to the sophistication of the attack.” The institution also explained that data to access the site was not compromised and reported that new security measures were implemented to prevent a similar leak in the future. “The DGFiP will contact each of the individuals and professionals concerned directly next week. They will receive individual information by email or post specifying the data likely to have been consulted or extracted and, where applicable, the vigilance measures to adopt,” it concluded. French crypto holders have voiced their concerns on social media, fearing that this new leak could fuel more “wrench attacks” against them. France has become a hotbed for these crimes after a tax official allegedly sold data from high-profile crypto holders. Alexandre Stachtchenko, Head of Strategy & Communications at Bitstack, called for a moratorium on the collection of personal data…

Disclaimer: The articles reposted on this website are sourced from public platforms and are for reference only. These articles do not represent the views or opinions of KCEX. All copyrights belong to the original authors. If you believe that any reposted article infringes upon the rights of a third party, please contact crypto.news@kcex.com for removal. KCEX makes no representations or warranties regarding the timeliness, accuracy, or completeness of reposted articles, and shall not be liable for any actions or decisions made based on such content. Reposted materials are for informational purposes only and do not constitute advice, endorsement, or basis for any commercial, financial, legal, and/or tax decisions.