2026 DGFiP cadastral server — ZeroBytes claim; ~2M property holders extracted (unverified)
Data compromised
Actor-claimed 252,149 cadastral rows covering ~2,041,778 named property holders (multiple holders per parcel), plus claimed continuing panel access. Unverified.
Technical writeup
Unverified government extortion claim — August 13, 2026. Dark Web Informer reported ZeroBytes claiming a second intrusion against France’s DGFiP, targeting the professional cadastral property-registry server with 252,149 extracted rows representing ~2,041,778 individuals (multiple owners per parcel) and alleging continued authenticated access for sale after an MFA bypass. DGFiP had not publicly confirmed the claim at indexing. Actor “20 million reachable” statements describe system scope, not extracted rows. BreachHistory indexes recordsAffected 2041778 as the actor-cited holder count labeled unverified.
Root cause
ZeroBytes group claims MFA-bypass credential access to professional cadastral data server; ongoing access offered for sale