France's tax agency cut off the intruder in June and warned taxpayers in August

An intruder broke into the systems of France’s Directorate General of Public Finances (DGFiP) and removed personal and tax records of individuals and companies, the agency said on August 13.

The government says the exposure could affect millions of people and provide criminals with a ready-made list of targets.

How the access was opened and then cut off

The intrusion, which started with a stolen identity, dates to late June 2026, the ministry said in a statement.

In an internal control that month, staff detected the illegitimate access and turned it off by the end of June.

On August 12, a malicious actor claimed online to have been inside the DGFiP information system. The ministry issued its press statement the next day.

By the time that public claim was made, the original route was already shut down. But the ministry said the intruder had still been able to view and extract data while the access was live.

The DGFiP added restrictions to prevent new entries following the attacker’s August 12 boast, the statement added. The attacker gained access to a taxpayer search tool via a compromised internal VPN.

… Continue reading the full article at the original source below.