When Hackers Steal Your Tax Details, the Real Danger Isn’t the Breach — it’s the Phone Call That Comes After.
France’s tax administration has confirmed that hackers breached its systems and stole personal data belonging to 678,000 individuals and businesses.
The cyberattack gas triggered an immediate criminal investigation. Officials stated that this has been the most sophisticated attack the agency has ever faced.
The breach first surfaced in late June when a threat actor claimed responsibility for infiltrating the Directorate-General for Public Finances (DGFiP).
French authorities have since verified the claim, confirming that the stolen data includes income figures and tax details tied to hundreds of thousands of taxpayers. The Paris Public Prosecutor’s cybercrime unit has opened a formal probe and referred the case to OFAC, France’s specialist cybercrime enforcement office.
However, the officials pointed out that the stolen data did not grant hackers direct access to individual taxpayer accounts on the government’s impots.gouv.fr portal.
But that distinction offers only partial comfort.
Income levels, tax brackets, and family/household details are precisely the kind of information that makes a phishing email or a fraudulent phone call convincing.
For now, the DGFiP has not detailed how the attackers gained access or whether the intrusion is linked to previous breaches of government systems.
The investigation is ongoing, and authorities have signaled that more details are expected as the criminal inquiry proceeds.
