The DGFiP is France's national tax authority, responsible for assessing and collecting taxes and managing public finances for individuals and businesses.
ANSSI says stolen staff passwords let an attacker take data on about 600,000 French taxpayers and firms, and the theft went undetected for seven weeks. Its report blames password-only portals, a flat government network and a reset that left the attacker's session open.
Reality
ANSSI says an attacker used dozens of stolen DGFIP staff passwords on password-only portals to take data on over 600,000 French taxpayers and businesses. For other operators, the fixes are login checks on devices they do not manage and a password reset that also ends live sessions.
Reality
678,000 DGFiP records are being marketed with names, addresses and income figures together. France logged 33 of CertiK's 52 verified physical coercion attacks on crypto holders in H1 2026.
Reality
France's tax authority says an intruder used a stolen or misused identity to reach its systems in late June and extract data on individuals and businesses before access was cut.
Perspective Coverage
6 publishersReality
Meria's Owen Simonin ties a wave of calls impersonating Binance and his own support desk to France's pile-up of data leaks. The state cyber agency was already recording the same script in January, before the DGFiP intrusion.
Reality
Four hooded men entered a house near Lens at 4 a.m. on Sunday and left more than three hours later with 40,000 euros in crypto taken from a salaried IT worker. Bethune prosecutors are treating it as organized extortion.
Reality
An intruder inside the work platform shared by Japanese ministries took names, emails and phone numbers belonging to 246,000 staff and contractors, and the agency says none of it has shown up in a confirmed case of misuse.
Reality
PDFik's write-up on shipping Factur-X output argues the container, not the XML attachment, is the hard part, and that a clean validator run says nothing about whether German or French rules accept the file.
Reality
France's DGFiP confirmed tax and property data exposure for 678,000 filers while GitLab fixed an unauthenticated project-deletion bug. Both arrived with figures a team can act on.
Reality
DGFiP says the intruder used a stolen employee identifier and an authorised third party's credentials, and claimed to bypass MFA. No zero-day was involved.
Reality