French tax authority admits data heist after crook touts 2M records
Government disputes claims of continued access as investigators measure damage
France's tax authority has confirmed that an intruder accessed its systems and extracted data in June after an alleged cybercriminal advertised a purported database of 2 million taxpayers.
Using the alias "ZeroBytes," the alleged crook behind the attack on the General Directorate of Public Finances (DGFiP) advertised the stolen database on a cybercrime forum on Wednesday.
They claimed the database contained details of more than 2 million French taxpayers and that they gained access using stolen credentials and an MFA bypass technique.
ZeroBytes also claimed to retain access to DGFiP's systems and offered to sell it alongside the database.
DGFiP did not immediately answer our questions about the attacker's claims. However, in a statement released Thursday, it disputed the claim that ZeroBytes retained access.
"On Wednesday, August 12, 2026, a malicious actor claimed unauthorized access to the information system of...
Copyright of this story solely belongs to theregister.com. To see the full text click HERE
