France Tax Data Leak Could Fuel Scams, Attacks Targeting Bitcoin Holders

FrenchBreaches said a sample of the leaked data included names, birth details, home and email addresses, phone numbers, income figures, withholding tax rates, family status, dependents, and tax-share information.

“There DGFiP officially confirms the intrusion in its information system,” FrenchBreaches wrote in an update. Stolen credentials were used in late June to access and extract taxpayer data, and the number of people affected remains under investigation, the firm added.

According to FrenchBreaches, the attacker used stolen VPN credentials and an internal search tool to extract names, contact details, tax identifiers, income figures, withholding rates, and family information before officials cut off access.

“A scammer with real tax information and knowing of the existence of an old approach to the DGFiP could, for example, construct a fraudulent message that is much more credible than a simple fake generic email,” FrenchBreaches wrote.

While the FrenchBreaches report focused on the data leak, it comes amid a rise in wrench attacks, in which criminals use violence or threats to steal cryptocurrency.

In July, CertiK reported 52 attacks worldwide during the first half of 2026, including 33 in France. Earlier this month, Chainalysis reported 46 attacks through June, including 30 in France, with more than $30 million stolen.

“Criminals have recognized that crypto holders are high-value targets because they possess wealth in an instantly and irreversibly transferable form,” Chainalysis wrote.