Threat Intelligence Brief
Curated summary with source attribution
Source: news.bitcoin.com
Threat Risk: High
Victim: French General Directorate of Public Finances (DGFiP)
Incident: Data breach involving the theft of 678,438 taxpayer records.
Impact: Exposure of sensitive residential and real estate data, potentially facilitating targeted physical crimes.
Attacker: Zerobytes
Analysis: The attacker, known as Zerobytes, leveraged an internal search VPN tool to gain unauthorized access to internal servers. The breach resulted in the theft of addresses and real estate information, which is currently being sold online. The incident highlights a failure in the agency’s initial detection capabilities to identify data exfiltration despite cutting off account access.
Recommendations: Implement strict multi-factor authentication and least-privilege access for all VPN tools.; Conduct comprehensive audits of internal search and administrative tools to prevent unauthorized data harvesting.; Monitor dark web marketplaces for leaked government datasets to identify compromised accounts.
Source: Bitcoin.com
Editorial note: this post summarizes third-party reporting and links to the original source.
View Original Source
Latest Developments
Update — 2026-08-17 14:20 UTC
Unauthorized access and exfiltration of tax and land registry data. Exposure of sensitive financial and property information for 678,000 individuals and professionals. The attacker exploited access points within the DGFiP systems to extract sensitive tax and property data. While user passwords remained secure, the theft of tax income and cadastral information creates a significant risk for targeted phishing and identity fraud. This incident follows a pattern of recent successful attacks targeting various French state agencies.
Corroborating source: bleepingcomputer.com
Update — 2026-08-17 18:07 UTC
Unauthorized access and data exfiltration from tax authority systems. Exposure of sensitive personal and business tax information for potentially 678,000 taxpayers. A malicious actor successfully infiltrated the systems of the General Directorate of Public Finances, extracting sensitive tax records. This incident follows a prior breach of the national bank account database (FICOBA), suggesting a persistent targeting of French financial infrastructure. The scale is estimated at over 600,000 records, though official confirmation is pending.
Corroborating source: sumsub.com
Update — 2026-08-19 01:08 UTC
Data breach of taxpayer information. Compromise of sensitive personal and business data for 678,000 entities. The breach targets the French General Directorate of Public Finances (DGFIP), exposing highly sensitive financial and personal data. This incident highlights critical vulnerabilities within government digital infrastructure and the high value of state-held data for attackers. The scale of the breach necessitates a nationwide notification process and an acceleration of public sector security investments.
Corroborating source: lemonde.fr