The case
The French tax authority (DGFiP) reported unauthorized access to its systems in June and July 2026 following the use of compromised credentials.
Source: DGFiP
The commentary
The incident may have exposed data relating to approximately 678,000 individuals and businesses, including tax, company and property information.
However, usernames, passwords and personal Finances publiques accounts were not compromised.
The DGFiP has strengthened its security measures, notified the CNIL and is continuing its investigation in cooperation with ANSSI. Affected individuals and businesses will be contacted directly with further information and guidance. For more details se link.









