A cybercriminal group known as ZeroBytes has claimed responsibility for stealing sensitive tax data from thousands of French citizens and businesses, asserting that the information was sold to two individuals for several thousand euros. The revelation came amid a government crisis meeting following the breach, which affected over 678,000 taxpayers and approximately 200,000 business accounts. According to ZeroBytes, the stolen files include personal details such as names, income levels, family quotients, and pre-withholding rates, raising concerns about potential targeted scams. The group, operating under the moniker ZeroBytes, communicated with journalists via Telegram using publicly shared coordinates on a dark web forum dedicated to selling stolen data. The breach occurred through unauthorized access to the French tax administration’s systems, reportedly involving the impersonation of both an official employee and a third-party authorized user. This allowed the attackers to extract sensitive information from the system. The French Tax Authority confirmed the incident on August 14, stating that the data theft had taken place in late June and July. The stolen records contain detailed financial information, including names, income figures, and other personal identifiers, which could be exploited by criminals for identity theft or fraudulent activities. ZeroBytes, which claims to consist of two French-based hackers, has previously targeted major corporations and organizations in France. It has admitted to hacking into the databases of supermarket chain Intermarché, the French Handball Federation, and a large telecommunications company, among others. However, these earlier attacks have not been independently verified by the affected entities. The group has expressed its interest in targeting France due to its perceived ease of penetration, citing the country's frequent appearance as a target in dark web forums. French authorities have responded swiftly to the breach. The Paris prosecutor’s office has launched an investigation into the incident, focusing on the illegal extraction of data and potential collusion among offenders. Prime Minister Sébastien Lecornu has convened an inter-ministerial emergency meeting to address the situation. In addition, the government has committed to contacting all affected individuals directly starting Monday, August 17, to inform them of the breach and provide guidance on how to protect themselves from possible fraud. The French tax authority, through its director general Amélie Verdier, has apologized to the affected taxpayers and emphasized the gravity of the situation. She urged caution and advised individuals to remain vigilant against potential scams. The government has pledged to learn lessons from this incident and improve the security measures protecting administrative systems after multiple high-profile breaches. A broader plan for securing state institutions is currently being developed, with ongoing discussions aimed at preventing future cyberattacks. As the situation unfolds, the government continues to monitor the impact of the breach and assess the extent of the damage. The stolen data, according to ZeroBytes, remains available for sale, suggesting that the threat may persist. The French administration is preparing to implement additional protective measures while working closely with cybersecurity experts to mitigate risks associated with the exposed information.
★
Keep the news honest.
ObjectiveNews is reader-funded and ad-free — we show you the bias instead of hiding it. Support independent journalism for €4/month.
Become a Supporter
France
