Paris Prosecutor Opens Investigation into Sophisticated Cyberattack on French Tax System

The Paris public prosecutor's office has launched an investigation following a sophisticated cyberattack on the French tax administration that occurred at the end of June 2026. This breach compromised personal data belonging to nearly 700,000 individuals and businesses, triggering concerns over data security within the state’s fiscal system.

According to the General Directorate of Public Finances (DGFiP), the stolen information includes sensitive taxpayer details such as names, family quotient, reference tax income, and withholding tax rates for individuals. For businesses, the data taken is considered less sensitive and primarily involves registration numbers (Siren) and addresses. The DGFiP reassured the public that despite the data leak, no access to secure taxpayer accounts on the impots.gouv.fr website was granted by the attackers.

The investigation is being conducted by the Office for Cybercrime (Ofac) and focuses on the fraudulent extraction of this personal data as well as the potential involvement of organized criminal groups. Amélie Verdier, Director General of Public Finances, described the cyberattack as "more sophisticated" than previous incidents, thereby elevating its severity.

Those affected by the breach will be contacted within the coming week to inform them of potential risks related to identity theft, emphasizing the administration's commitment to mitigating harm. The public prosecutor’s office aims to uncover the origins of the attack and any criminal networks associated with it.

This incident marks a significant cyber threat against France's tax administration, raising awareness about the vulnerabilities in government digital infrastructures and the importance of continued vigilance against cybercrime.