Intruder using a stolen identity accesses France's tax authority systems and extracts individual and business taxpayer data

France's tax authority DGFiP said on August 14 that a malicious actor claimed on August 12 and 13 to have stolen data following illegitimate access to its information system in June, July and August ^[1]. According to The Record, the Economy Ministry said the attacker gained access in late June by stealing or misusing someone's identity and was able "to view and extract data belonging to individuals and businesses"; the hacker's claim of data on more than 600,000 people is unverified and DGFiP has not attributed the breach ^[2]. French taxpayers should watch for individual DGFiP notices and use the official FAQ and guidance to guard against scams; officials say impots.gouv.fr and user accounts were not compromised ^[1][2].

Industries mainly affected: Government

1. Watch for individual DGFiP notices explaining what data may be exposed and what precautions to take ^[2].
2. Use the FAQ and guidance on impots.gouv.fr to guard against impersonation scams and data misuse .