2026 DGFiP successions vacantes — portal data theft confirmed; volume TBD
Data compromised
DGFiP: stolen elements from vacant-estates portal — identities, addresses, emails, death dates/places, marital status, succession/patrimony fields; count not yet published
Technical writeup
Ministry-confirmed third DGFiP summer incident: Cyberattaque.org reported DGFiP acknowledged theft of data from the Portail des successions vacantes after a vulnerability (since patched) allowed access without authentication. Potential fields include identity, postal/email coordinates, death information, marital status, and succession-related data. Volume unknown at indexing. Distinct from 678k fiscal breach and 1.8M SPDC cadastre accounts. recordsAffected 0 pending census; companyConfirmed true.
Root cause
Vulnerability on Portail des successions vacantes allowed unauthenticated access; DGFiP confirms data theft (Aug 2026)