France’s tax authority was the target of a cyberattack that allowed access to data relating to “citizens” and “professionals,” the Ministry of Finance said. The ministry stated that yesterday “a malicious actor claimed unauthorized access to the information system of the Directorate General of Public Finances (DGFiP), which occurred at the end of June 2026 following identity theft.” Preliminary investigations “confirm that the access, which was blocked at the end of June during an inspection, nonetheless allowed consultation and extraction of data concerning private individuals and professional users.”

The DGFiP “immediately implemented new restrictions to block unauthorized access and prevent further incidents. In-depth investigations are underway to determine exactly which data were compromised and the number of users affected.” Affected users “will receive an individual notification specifying the data that may have been viewed or extracted and, where necessary, the precautions to take.”

The Directorate General of Public Finances (DGFiP) “will notify the National Commission on Informatics and Liberty (CNIL), file a complaint, and provide further updates as the investigation proceeds.”