On Friday, Amélie Verdier, Director General of the General Directorate of Public Finances (DGFiP), expressed regret over an “attack that was more sophisticated” than those seen “previously.”
In a press release cited by Euronews , the tax authority reported a breach of its information system that allowed attackers to view and extract a range of confidential data, including estimated tax revenue and the withholding tax rate.
The tax agency is trying to reassure the public
They claim that the stolen data “does not provide access to secure personal accounts on impots.gouv.fr.” For companies, the compromised information is considered “less sensitive” than data on private individuals. Specifically, this includes company names and Siren identification numbers.
In another attack, for which the same cybercriminal—operating under the pseudonym ZeoBytes—claimed responsibility, cadastral data on real estate properties was stolen. According to the website FrenchBreaches, which tracks cyberattacks in France, the hacker claims that this breach took place back in June 2026.
The website also attributes other attacks to the same attacker, specifically against the Intermarché supermarket chain, the French virtual reality platform Eva GG, and the French Handball Federation (FFHandball).
A “plan to protect the state’s information systems” has been launched. It calls for the imminent creation of a new state digital regulator called ARIANE, which will report directly to the prime minister.
This campaign to strengthen cybersecurity has already required 200 million euros, part of which will go toward developing capabilities in the field of artificial intelligence. As part of the 2027 budget, its funding is to be supplemented by fines imposed by the CNIL, the French data protection authority.
Follow our updates
