2026 DGFiP SPDC — 1.8M cadastre accounts confirmed (2nd incident; separate from 678k fiscal)
Data compromised
DGFiP: ~1.8M accounts in cadastral property files; names, birth data, addresses, parcel/titulaire references per trade reporting — distinct from June–July 678k fiscal census
Technical writeup
Ministry-confirmed second DGFiP incident: Cyberattaque.org reported DGFiP revised the SPDC cadastre compromise (ZeroBytes claimed 29 July 2026 access to apexappliext.dgfip.finances.gouv.fr) to ~1.8 million accounts — separate from the June–July fiscal-data breach affecting 678,000 individuals/professionals (dgfip-cadastral-zerobytes2026). Actor marketing cited 252,149 lines and ~2.04M titulaires; ministry uses “accounts.” CNIL investigations context from broader Bercy summer incidents. recordsAffected 1800000; companyConfirmed true.
Root cause
Illegitimate access to Serveur Professionnel de Données Cadastrales (SPDC); intrusion dated 29 July 2026 per investigations