France investigates tax platform breach affecting 678,000 users

The Paris prosecutor's office opened a criminal investigation on Saturday into a cyberattack targeting France's tax administration platform, which compromised sensitive records belonging to 678,000 individual and corporate taxpayers, according to media reports.

Criminal probe launched

The French Anti-Cybercrime Office has been assigned to lead the inquiry into the breach, which the tax authority described as "more sophisticated" than previous incidents. The alleged offenses under investigation include the "fraudulent extraction of data contained in an automated personal data processing system implemented by the state," alongside charges related to organized criminal access and participation in a criminal association formed to prepare offenses punishable by at least five years imprisonment, BFMTV reported.

Data accessed

Compromised personal information includes taxpayers' names, family quotient details, reference tax income and withholding tax rates, said Amelie Verdier, director general of public finances. The data extracted from businesses — considered less sensitive — encompasses identification numbers along with company and representative addresses, though the stolen information "does not allow access to the secure account on impots.gouv.fr," the tax administration stated.

Identity theft risk

Authorities said affected users will begin receiving notifications next week regarding potential identity theft risks linked to the extracted records. The French Anti-Cybercrime Office continues forensic analysis of the intrusion as officials work to prevent further unauthorized access to state data systems.