Nearly 700,000 French Taxpayer Records Reportedly Stolen in Government Cyberattack

### Executive summary France’s Finance Ministry confirmed a cyberattack on the DGFiP that allowed a malicious actor to access and extract taxpayer personal and professional data—reportedly up to ~678,000 records (figures unconfirmed)—including names, addresses, dates of birth, tax details and internal identifiers; the stolen dataset was allegedly offered for sale, the intrusion was claimed to have used stolen professional credentials via VPN, and French authorities (ANSSI, CNIL) are investigating and preparing notifications to affected individuals.