French Tax Hack Exposes 678,000 Records, Elevating Security Risks for Crypto Holders
A breach of France’s tax authority has exposed the financial and personal details of nearly 680,000 taxpayers, creating severe security risks for high-net-worth individuals and cryptocurrency investors targeted by physical and digital theft.
A hacker is currently selling a database containing the personal and financial records of 678,437 French individuals and businesses. The data was allegedly extracted from the DGFiP, France’s tax authority, during a security breach in late June.
Attackers reportedly used stolen virtual private network credentials alongside an internal search tool to access the system. The DGFiP has officially confirmed the intrusion, though the exact scope of affected taxpayers remains under investigation.
The compromised files include highly sensitive information such as names, birth details, home addresses, and tax identifiers. Crucially for financial professionals, the leak also contains precise income figures, withholding tax rates, and family dependency data.
The breached database outlines the wealth of a significant portion of the French population. It includes 26,805 individuals with a reference tax income of at least $116,000, alongside 386 taxpayers earning above $1.16 million and eight exceeding $11.6 million.
For market participants and digital asset investors, this granularity of data drastically lowers the barrier to sophisticated social engineering. Cybersecurity analysts warn that criminals can use this verified financial history to construct highly credible phishing campaigns rather than relying on generic spam.
The entire dataset is reportedly being offered for sale for just several thousand euros. Security experts note that fraudsters armed with authentic financial records can easily bypass standard skepticism when targeting high-net-worth victims.
Beyond digital fraud, the leak exacerbates physical security threats against cryptocurrency holders. Because digital assets can be moved instantly and cannot be reversed, investors remain prime targets for physical extortion.
France has already emerged as a primary hotspot for these physical attacks, where criminals use violence or threats to force the surrender of private keys. Security firms recorded over 30 such incidents in France during the first half of 2026 alone, resulting in more than $30 million in stolen digital assets.
Jameson Lopp, chief security officer at Bitcoin security platform Casa, highlighted the acute danger for local digital asset owners. He stated that the breach brings "more bad news for Bitcoiners living in the leading country for wrench attacks."
