678,000 French Tax Records Allegedly Exposed. DGFIP Stays Silent
A single post on frenchbreaches.com is enough to set off alarm bells in France. The leak-monitoring site claims the Direction générale des finances publiques was hit in June 2026 and that tax data belonging to more than 678,000 people was exposed.
The alleged payload is broad: names, birth dates, addresses, family situation, income, withholding tax rate, number of dependents. That is the kind of dataset that fuels targeted phishing and identity fraud. But the claim remains just that, a claim.
Why the number needs a second look
Claimed leaks are not verified leaks. The same logic applied in 2023, when a hacker boasted about holding data on 14 million Free customers. The operator denied the breach outright.
The DGFiP has not confirmed or denied the current alert. That silence matters, especially because the administration already dealt with a confirmed incident in February 2026. An attacker used stolen employee credentials to access part of the Ficoba national bank account file, exposing roughly 1.2 million people.
A claimed leak is not a confirmed leak.
That prior incident is real. It does not prove the new alert is real. Until the DGFiP speaks, the 678,000 figure stays in the conditional tense.
What to do right now
No confirmed breach means no official notification. But the usual tax-themed scams will likely exploit the headlines. Frandroid recommends a few reflexes:
- Change passwords for any account linked to tax services.
- Replace identical or similar passwords on other services.
- Use unique passwords and a password manager.
- Turn on 2FA wherever possible, including passkeys.
- Ignore suspicious emails, SMS or calls even if they look official.
- Never click a link or attachment when in doubt.
- Report fraudulent transfers on the Perceval platform.
If the breach is confirmed, the exposure of tax data at this scale would be serious. Until then, the safest position is simple: treat the number as unverified and watch for official DGFiP communication.