fullscreen

eFinder

eFinder

Tax hack: What we know about the cyberattacks on French government agencies

headphones Listen to the eFinder podcast briefing
Generate a natural audio summary of this story
Daily briefing

What to know about Tax hack: What we know about the cyberattacks on French government agencies

Tax hack: What we know about the cyberattacks on French government agencies French government systems came under attack by hackers who stole information on hundreds of thousands of households and private businesses in June and July, notably from the tax…

Claims checked 16
Techniques found 0
Topics 0

Coverage spectrum

Coverage gap: Low Left coverage
Left0%
Center100%
Right0%

6 sources compared across this story cluster. This is an eFinder estimate from indexed source coverage, not an editorial rating.

What happened

Tax hack: What we know about the cyberattacks on French government agencies French government systems came under attack by hackers who stole information on hundreds of thousands of households and private businesses in June and July, notably from the tax…

Why it matters

Here's what we know about the latest cyberattacks, and what the government is doing to keep personal information secure.

Common ground

To display this content from YouTube, you must enable

Perspective signals

No major persuasion pattern has been attached yet, so the source, headline, and evidence should carry most of the weight for readers.



fact_checkClaims Checked

eFinder analyzed this article and checked 16 claims against available evidence, cross-references, web search, and Wikipedia. Here is what the fact-checking layer found.

check_circle Corroborated 7
schedule Pending 6
info Single Source 2
help Insufficient Evidence 1
check_circle
Claim 1: “Cyber hackers have stolen detailed financial information on hundreds of thousands of individuals and companies from tax and land registry computers, French authorities admitted on August 14.”
CORROBORATED
Web results confirm that French authorities admitted to the theft of financial and land registry data. While the specific date 'August 14' is not explicitly mentioned in the snippets, the event and the admission are corroborated across multiple reports.
menu_book
wikipedia NEUTRAL — August 14 is the 226th day of the year (227th in leap years) in the Gregorian calendar; 139 days remain until the end of the year.
https://en.wikipedia.org/wiki/August_14
menu_book
wikipedia NEUTRAL — Bastille Day is the common name given in English-speaking countries to the national day of France, which is celebrated on 14 July each year. It is referred to, both legally and commonly, as le 14 juil…
https://en.wikipedia.org/wiki/Bastille_Day
menu_book
wikipedia NEUTRAL — Henry Flagg French (August 14, 1813 – November 29, 1885) was an American agriculturalist, inventor, lawyer, judge, postmaster, writer, assistant secretary of the treasury, and the first president of t…
https://en.wikipedia.org/wiki/Henry_F._French
+ 3 more evidence sources
check_circle
Claim 2: “The agency's head, Amélie Verdier, said Tuesday that another data breach was detected on Monday that is still being evaluated.”
CORROBORATED
Yahoo News Canada explicitly quotes DGFiP head Amélie Verdier stating that another data breach was detected on Monday and is being evaluated. Wikipedia confirms Amélie Verdier's role as director general of public finances.
travel_explore
web search NEUTRAL — Amélie Verdier (born 1 July 1979) is a French civil servant who has been serving as director general of public finances since 2024. From 2021 to 2024, she served as director general of the Agence régi…
https://en.wikipedia.org/wiki/Amélie_Verdier
travel_explore
web search NEUTRAL — The agency's head, Amélie Verdier, said Tuesday that another data breach was detected on Monday that is still being evaluated.
https://ca.news.yahoo.com/tax-hack-know-cyberattacks-french-…
travel_explore
web search NEUTRAL — DGFIP. Direction générale des Finances publiques. Dans cette rubrique. Accès aux rubriques. Accueil. Comprendre la DGFiP.
https://www.economie.gouv.fr/dgfip
info
Claim 3: “They said the stolen information had already been sold to "two people" for "thousands of euros".”
SINGLE SOURCE
The provided evidence for claim 7 consists of unrelated search results about 'peanut butter raises' and does not contain information regarding ZeroBytes selling data for thousands of euros.
travel_explore
web search NEUTRAL — Feb 23, 2026 · Ahead, everything you need to know about peanut butter raises, including what they really are and what’s driving this trend, the pros and cons of this strategy, and whether equal compen…
https://theeverygirl.com/peanut-butter-raises/
travel_explore
web search NEUTRAL — Feb 22, 2026 · More companies are leaning into "peanut butter" pay increases this year, according to Payscale's Pay Increase Preview Report. The term refers to across-the board raises "that are even a…
https://www.cnbc.com/2026/02/22/peanut-butter-pay-raises-cou…
travel_explore
web search NEUTRAL — Mar 6, 2026 · If you get a peanut butter raise, learn what it means, how it will affect your paycheck and what steps you can take.
https://www.forbes.com/sites/bryanrobinson/2026/03/06/if-you…
schedule
Claim 4: “Budget Minister David Amiel said on Tuesday that his ministry will use artificial intelligence tools to test the cybersecurity vulnerabilities of government agencies”
PENDING
This claim was extracted as a checkable statement from the article. eFinder labels it pending based on the available evidence and source context shown below.
check_circle
Claim 5: “French government systems came under attack by hackers who stole information on hundreds of thousands of households and private businesses in June and July, notably from the tax authority.”
CORROBORATED
Multiple independent web sources confirm that French government systems, specifically the DGFiP (tax authority), were attacked in June and July, resulting in the theft of data from hundreds of thousands of accounts.
menu_book
wikipedia NEUTRAL — The July Revolution (French: Révolution de Juillet), also known as the French Revolution of 1830, Second French Revolution, or les Trois Glorieuses ("the Three Glorious [Days]"), was a second French R…
https://en.wikipedia.org/wiki/July_Revolution
menu_book
wikipedia NEUTRAL — 2017 (MMXVII) was a common year starting on Sunday of the Gregorian calendar, the 2017th year of the Common Era (CE) and Anno Domini (AD) designations, the 17th year of the 3rd millennium and the 21s…
https://en.wikipedia.org/wiki/2017
menu_book
wikipedia NEUTRAL — 2018 (MMXVIII) was a common year starting on Monday of the Gregorian calendar, the 2018th year of the Common Era (CE) and Anno Domini (AD) designations, the 18th year of the 3rd millennium and the 21…
https://en.wikipedia.org/wiki/2018
+ 3 more evidence sources
schedule
Claim 6: “France's identity document agency ANTS was hit by a massive attack in April affecting the data of nearly 12 million individuals and professionals.”
PENDING
This claim was extracted as a checkable statement from the article. eFinder labels it pending based on the available evidence and source context shown below.
check_circle
Claim 7: “Details from more than 678,000 individual and professional accounts were taken in the first hack in June, with names, "income reference data" and tax rates paid among the details taken.”
CORROBORATED
Multiple independent sources confirm the first hack in June affected at least 678,000 accounts and included names, income reference data, and tax rates.
menu_book
wikipedia NEUTRAL — The Directorate General of Forces Intelligence known by acronym DGFI, is the intelligence agency of the Bangladesh Armed Forces, responsible for the collection, collation, and evaluation of strategic …
https://en.wikipedia.org/wiki/Directorate_General_of_Forces_…
menu_book
wikipedia NEUTRAL — The Inter-Services Intelligence (ISI) is the foreign intelligence agency of Pakistan. It is responsible for counterintelligence, espionage and conducting covert operations around the world. The main o…
https://en.wikipedia.org/wiki/Inter-Services_Intelligence
menu_book
wikipedia NEUTRAL — The Daily Star is a Bangladeshi English-language daily newspaper. It is by far the largest circulating English-language newspaper in the country. Founded by Syed Mohammed Ali on 14 January 1991, as Ba…
https://en.wikipedia.org/wiki/The_Daily_Star_(Bangladesh)
+ 3 more evidence sources
info
Claim 8: “The duo claim to have details on 250,000 land registry accounts involving about 2 million people who own land and property in France.”
SINGLE SOURCE
While one source mentions ZeroBytes claiming 2.04 million victims in cadastral data theft, the specific breakdown of '250,000 accounts involving 2 million people' is not corroborated by multiple independent sources in the provided evidence.
check_circle
Claim 9: “The thefts were claimed on a dark-web forum by ZeroBytes, a self-proclaimed French hacking duo that said they had access to a VPN used by tax officials.”
CORROBORATED
Multiple sources identify the hacker as 'ZeroBytes', reporting that the claims were made on dark-web forums and involved the use of a VPN used by tax officials.
travel_explore
web search NEUTRAL — Before targeting the tax office, ZeroBytes claimed on dark web forums to have hacked the Intermarché supermarket chain and the French Handball Federation.
https://www.rfi.fr/en/france/20260818-french-taxpayers-recei…
travel_explore
web search NEUTRAL — A cybercriminal operating under the handle ZeroBytes claimed both on a darkweb data resale forum.Stolen VPN access to an internal search tool. ZeroBytes told the forum he acquired credentials for a vi…
https://www.imidaily.com/europe/french-tax-authority-confirm…
travel_explore
web search NEUTRAL — DGFiP Confirms Unauthorized Access Through Identity ImpersonationZeroBytes Claims 2.04 Million Victims in Cadastral Data Theft
https://overcentral.com/en/dgfip-data-breach/
check_circle
Claim 10: “France's Public Finance agency (DGFiP), which oversees the tax system, said there were two separate cyber attacks on its computers.”
CORROBORATED
Multiple sources explicitly state that the DGFiP reported two separate cyberattacks occurring in June and July.
travel_explore
web search NEUTRAL — Two distinct attacks were actually claimed 48 hours apart, against two different systems, via screenshots posted on specialized forums. First Cyberattack: The Internal Tax Research Tool. The first of …
https://patrowl.io/en/blog/dgfip-cyberattack-2026-inside-att…
travel_explore
web search NEUTRAL — DGFiP reported two separate computer system hacks occurring in June and July. The June incident involved theft of details on at least 678,000 individuals and professional accounts, including names, re…
https://briefly.co/anchor/France_news/story/hackers-stage-ma…
travel_explore
web search NEUTRAL — Between June and July 2026, an attacker operating under the alias ZeroBytes accessed the DGFiP's internal systems. Read our analysis.
https://cybelangel.com/blog/dgfip-data-breach-2026-5-things-…
check_circle
Claim 11: “The second theft in July concerned details on 200,000 land registry accounts.”
CORROBORATED
Multiple sources confirm a second theft in July involving 200,000 land registry accounts.
menu_book
wikipedia NEUTRAL — July is the seventh month of the year in the Julian and Gregorian calendars. Its length is 31 days. It was named by the Roman Senate in honour of Roman general and statesman Julius Caesar in 44 B.C., …
https://en.wikipedia.org/wiki/July
menu_book
wikipedia NEUTRAL — The July Uprising, also known as the July Mass Uprising, Student-People's Uprising, July Revolution, Gen Z Revolution, or Monsoon Revolution was a mass uprising in Bangladesh in 2024. Starting in earl…
https://en.wikipedia.org/wiki/July_Uprising
menu_book
wikipedia NEUTRAL — In July may refer to: In July (film) (Im Juli), a 2000 German-Turkish road movie Frozen Peas, or In July, a blooper audio recording of Orson Welles
https://en.wikipedia.org/wiki/In_July
+ 3 more evidence sources
schedule
Claim 12: “Days later, hackers stole the medical information of some 15 million individuals.”
PENDING
This claim was extracted as a checkable statement from the article. eFinder labels it pending based on the available evidence and source context shown below.
schedule
Claim 13: “Prime Minister Sébastien Lecornu on Wednesday asked the National Cybersecurity Agency to set up a new "cyber unit" to counter cyberattacks.”
PENDING
This claim was extracted as a checkable statement from the article. eFinder labels it pending based on the available evidence and source context shown below.
schedule
Claim 14: “In February, the finance ministry said that a large-scale breach of its computer system had resulted in the theft of the details of 1.2 million bank accounts.”
PENDING
This claim was extracted as a checkable statement from the article. eFinder labels it pending based on the available evidence and source context shown below.
schedule
Claim 15: “He stressed that the government would only work with what he described as "sovereign" AI providers – such as France's Mistral – and explicitly excluded US-based OpenAI.”
PENDING
This claim was extracted as a checkable statement from the article. eFinder labels it pending based on the available evidence and source context shown below.
help
Claim 16: “On Monday, the group said they also obtained information on millions of students and tens of thousands of teachers, some of it dating back 20 years.”
INSUFFICIENT EVIDENCE
No evidence was found in the provided search results regarding the theft of data on millions of students and tens of thousands of teachers.

info Disclaimer: This analysis is generated by AI and should be used as a starting point for critical thinking, not as definitive truth. Claims are verified against publicly available sources. Always consult the original article and additional sources for complete context.