French tax authority breach exposes nearly 678,000 taxpayer records as crypto wrench attacks surge
This digest was compiled by AI from multiple sources — links to the originals are below.
Hackers penetrated the French General Directorate of Public Finances in late June and exposed nearly 678,000 taxpayer records, the finance ministry confirms. The stolen set includes names, addresses, phone numbers, incomes and tax identifiers, and is offered for sale on dark web markets for several thousand euros. The breach surfaces as France records 30 violent crypto attacks with more than $30 million in losses in the first half of 2026.
The Data Breach
FrenchBreaches reports the compromised records affected 678,437 people, about 1 percent of France's population. Among those exposed, 27,000 taxpayers declared income above €100,000, 386 reported more than €1 million, and eight exceeded €10 million. The attacker, known as ZeroBytes, said the records were extracted from an internal search tool at the General Directorate of Public Finances before access was cut. A database containing names, birthdates, home addresses, phone numbers and email addresses is listed for sale on dark web marketplaces for several thousand euros.
Crypto Wrench Attacks
France has become one of the world's hotspots for violent attacks in which criminals force crypto holders to hand over access. Chainalysis documented 30 publicly known violent crypto attacks in France in the first half of 2026, with losses exceeding $30 million. That pace puts 2026 on track to surpass the record $58 million stolen in 2025. The breach does not indicate which taxpayers own crypto, but security researcher Jameson Lopp wrote on X that combining income data with identities helps criminals select targets for fraud, home invasions and kidnappings.
The Employee Case
Chainalysis linked the rise in attacks partly to a separate case involving a French tax employee accused of selling crypto investors' confidential information to criminal organizations. The employee was arrested in June 2025, before the first-half 2026 surge recorded by the firm. The tax breach does not identify crypto holders, but it offers similar identity and income data that could be used to select high-net-worth targets.
What's Next
French investigators continue to assess the full scope of the breach and have not confirmed the final number of affected taxpayers. It remains unclear whether the stolen income data will be used to select victims for the country's accelerating wrench attacks.
1 source
French tax authority breach exposes nearly 678,000 taxpayer records as crypto wrench attacks surge
