2026 DGFiP — France Economy Ministry confirms 678,000 individuals/professionals; tax and cadastral data extracted

Ministry-confirmed tax-authority breach with attested census — communiqué n°953, 14 August 2026; English trade press 17 August. A malicious actor claimed illegitimate DGFiP access on 12–13 August. Bercy says those accesses occurred in June and July 2026 using usurped identifiers of a DGFiP agent and an authorised third party. DGFiP interrupted the implicated accounts on detection but initial access checks missed data theft due to attack sophistication. Investigations from 12 August established consultation and extraction affecting 678,000 individuals and professionals: RFR, family quotient, withholding-tax rate; for businesses, raison sociale and SIREN; plus cadastral addresses and surfaces. CNIL notified; ANSSI and SHFDS engaged; preventive cut-offs of sensitive systems; individual email/letter notices promised the following week; complaint to be filed. User espaces and passwords not compromised. ZeroBytes/PwnForums sale narrative (SPDC panel, ~252k records / 2M people / 20M theoretical) remains actor-side and is not the ministry census. Press often rounds to 680,000. BreachHistory sets recordsAffected 678000.