French Government Responds to Major Cyberattack on Tax Administration with ANSSI Audit and Outreach

Following a massive cyberattack on the French tax administration, the government has initiated an ANSSI audit and is contacting affected individuals, with a Senate inquiry under consideration.

    Key details

  • • A cyberattack targeting the French tax administration affected 678,000 users.
  • • Minister Sébastien Lecornu requested an ANSSI audit to investigate the breach.
  • • 350,000 individuals have been contacted by the tax administration regarding the attack.
  • • A Senate inquiry commission may be established to further examine the incident.

On August 17, 2026, Sébastien Lecornu, the French Minister for the Armed Forces, led an interministerial crisis meeting to address the severe cyberattack targeting the French tax administration, specifically the Direction générale des finances publiques (DGFiP). Recognized as potentially the most serious cyberattack in the nation's history, this breach has affected 678,000 users, with the administration currently contacting 350,000 individuals to inform them about the incident.

Lecornu announced that he has formally requested an audit from the Agence nationale de la sécurité des systèmes d'information (ANSSI) to thoroughly investigate the circumstances and vulnerabilities that led to this data theft. The attack has been attributed to the hacker group ZeroBytes, raising significant concerns over the security of governmental digital infrastructure.

In parallel, the government is contemplating establishing a Senate inquiry commission to delve deeper into the breach and its broader implications for national cybersecurity and public trust. The Prime Minister's convening of a crisis meeting underscores the gravity of the situation and the administration's commitment to managing the fallout.

This unfolding development highlights both the scale of the cyberattack and the immediate governmental actions aimed at damage assessment, mitigation, and accountability, as France confronts a critical challenge to the integrity of its public data systems.

This article was translated and synthesized from French sources, providing English-speaking readers with local perspectives.

Source comparison

Number of affected users

Sources report different numbers of users affected by the breach

lemonde.fr

"the breach impacted the French tax administration without specifying the number of affected users."

france24.com

"678,000 users were affected by this breach."

Why this matters: One source states that 678,000 users were affected, while the other does not mention this total. This discrepancy is significant as it affects the perceived scale of the cyber attack.

Attribution of the attack

Sources attribute the cyber attack to different parties

lemonde.fr

"the attack has raised concerns regarding the security of governmental digital infrastructure without mentioning the attackers."

france24.com

"the attack has been attributed to the hacker group known as ZeroBytes."

Why this matters: One source mentions the attack was significant but does not attribute it to any group, while the other specifically attributes it to the hacker group ZeroBytes. This affects understanding of the potential threat and accountability.

The top news stories in France

Delivered straight to your inbox each morning.