France investigates tax authority breach after hacker claims 600,000 victims

#### Executive summary: France’s Directorate General of Public Finances (DGFiP) confirmed an unauthorized access incident in late June that allowed an attacker to view and extract personal and business data; a hacker using the alias ZeroBytes claims to have obtained information on more than 600,000 people (including tax identification numbers, emails and tax status), though the claim is unverified. Authorities detected and cut off access, are investigating the scope of the leak, will notify affected individuals and France’s data protection authority, and have filed a criminal complaint.