France's General Directorate of Public Finances (DGFiP) has confirmed that a break-in exposed the data of roughly 600,000 taxpayers and businesses, with the actual contents of private messages compromised for around 250 people. The update follows last week's disclosure of the attack, in which a hacker known as "ZeroBytes" claimed to have stolen data belonging to more than 2 million individuals, though DGFiP has not explained the discrepancy between that figure and its own lower tally. The breach adds to a difficult year for French public-sector cybersecurity, raising concerns that stolen details could be used to craft convincing phishing and impersonation scams.

Slightly more than 350,000 individuals had data exposed, including tax identification numbers, marital status, contact details, household composition, dependants, and withholding rates, while lists of messages exchanged with the tax authority were also compromised. Around 250,000 businesses had only company names and SIREN numbers exposed, and cadastral data was limited to already-public property information. DGFiP is notifying affected taxpayers by email or post this week and has warned of possible CEO fraud, impersonation and fake bank adviser scams, stressing it will never request sensitive details by phone, text or email. Separately, the authority disclosed and suspended a vulnerable Vacant Successions Portal, though no data leak has yet been confirmed there.