cyber.hendryadrian.com
Cyber Attack & Data Breach · bleepingcomputer.com

French Tax Authority Confirms Data Theft Affecting 678,000 People

· Original article ↗

Summary

France’s Finance Ministry says attackers accessed DGFiP systems and extracted data on 678,000 people. ZeroBytes separately claimed access to the SPDC platform and offered records for sale; that claim is unconfirmed.

Key points

  • The Ministry says investigations established that DGFiP access points were used to consult and extract data concerning 678,000 individuals and professionals.
  • The affected data included tax details, business identifiers, and cadastral addresses and property sizes.
  • The Ministry said online user accounts, IDs, and passwords were not compromised.
  • DGFiP shut down access to sensitive systems, notified CNIL, and is investigating with ANSSI.
  • ZeroBytes claimed access to the SPDC land-registry platform and offered records for sale; the Ministry’s confirmed 678,000-person figure does not verify this separate claim.
  • The Ministry plans to notify affected people by email or letter and provide precautions.

Article Details

Victim Organization
General Directorate of Public Finances (DGFiP), French Ministry of the Economy and Finance
Incident Type
Unauthorized access to DGFiP systems and data theft
Data Types Exposed
  • Reference tax income
  • Family quotient
  • Withholding tax rate
  • Business names
  • SIREN numbers
  • Cadastral addresses
  • Property sizes
Affected Records
DGFiP confirmed data concerning 678,000 individuals and professionals was consulted and extracted. Separately, ZeroBytes claimed to have stolen 252,149 records containing data on more than 2 million people from SPDC; that separate claim is not confirmed in the article.
Operational Impact
The tax administration shut down access to sensitive information systems and is investigating with ANSSI. Online user accounts, IDs, and passwords were not compromised. The ministry said it would notify affected people by email or letter.
Ransom Or Extortion
ZeroBytes claimed to have listed stolen data for sale on PwnForums and offered the SPDC database for sale. No ransom demand is reported.
Claim Status
confirmed

Threat Actors

ZeroBytesThe attacker using this handle claimed responsibility for the breach and offered data for sale on PwnForums. DGFiP confirmed unauthorized access and data extraction, but the article does not independently confirm that ZeroBytes carried it out.

Products

SPDCThe attacker also claimed access to the SPDC platform and offered stolen records for sale on PwnForums, adding to a wave of recent French government data breaches.

Countries

Francesystems and continues investigating the incident with the help of the National Cybersecurity Agency of France (ANSSI) to assess the breach’s full impact.

Industries

GovernmentThe attacker also claimed access to the SPDC platform and offered stolen records for sale on PwnForums, adding to a wave of recent French government data breaches.