France's tax administration has confirmed a significant data breach that exposed sensitive financial and personal information of approximately 678,000 taxpayers and businesses. The incident raises immediate security concerns for cryptocurrency holders in the country, particularly as France already experiences high rates of crypto-related physical attacks.
Scope and Nature of the Breach
The compromised dataset includes 392,867 individual records and 285,570 business entries, according to cybersecurity researchers at FrenchBreaches who analyzed leaked samples. Among affected individuals, approximately 26,805 report annual taxable incomes exceeding €100,000, with 386 surpassing €1 million and eight exceeding €10 million.
A hacker using the alias "ZeroBytes" claimed responsibility on August 12, stating they infiltrated internal DGFiP servers and obtained VPN credentials that accessed an internal lookup tool. The extraction was reportedly interrupted before completion, though the exposed data includes:
- Full legal names and birth details
- Home and mailing addresses
- Marital status and dependent information
- Tax identification numbers and withholding rates
- Contact information and correspondence records with tax officials
The attacker has reportedly offered the complete dataset for sale for several thousand euros on cybercrime forums.
Implications for Crypto Workforce
Bitcoin developer Jameson Lopp highlighted the breach's significance for cryptocurrency professionals, noting that France already leads in "wrench attacks"—incidents where physical violence or coercion is used to steal cryptocurrency. His tracking data shows 54 such attacks documented globally in 2025 so far, following over 70 reported throughout 2024.
The combination of financial data and personal information creates targeted risk scenarios for high-income earners in blockchain and cryptocurrency sectors. Security analysts warn the leaked data could enable sophisticated phishing campaigns impersonating tax authorities and facilitate identity theft schemes tailored to victims' wealth profiles.
For crypto professionals working in France or considering opportunities there, this breach underscores the importance of operational security practices beyond digital asset protection. The incident follows a similar data breach affecting hardware wallet manufacturer Trezor announced just one day earlier, suggesting an escalating trend in security compromises affecting the crypto community.
