---
title: "Data breach at Direction générale des finances publiques (DGFiP)"
description: "Unauthorized access to the information system of the French tax administration (DGFiP) occurred in June and July 2026, obtained using stolen credentials belonging to an agency staff member and an authorized third party. This access allowed the consultation and extraction of data concerning about 678"
canonical: https://inyourgeek.com/en/fuites-de-donnees/2026-08-14-direction-generale-des-finances-publiques-dgfip
type: fuite-de-donnees
author: "Sébastien Soulier"
publisher: "InYourGeek"
language: en
datePublished: 2026-08-14
dateModified: 2026-08-14
---
# Direction générale des finances publiques (DGFiP)

Data breach — Moderate

Unauthorized access to the information system of the French tax administration (DGFiP) occurred in June and July 2026, obtained using stolen credentials belonging to an agency staff member and an authorized third party. This access allowed the consultation and extraction of data concerning about 678,000 individuals and businesses: civil status, addresses, tax identifiers, reference fiscal income, family quotient, withholding tax rate, as well as company names and SIREN numbers for businesses, and land registry information on real estate. The DGFiP states that taxpayers' personal online accounts were not compromised and that passwords were not stolen.

This precise, verified tax data could be used to commit fiscal identity fraud or to craft credible, targeted phishing attempts.

| Fact | Value |
| --- | --- |
| Disclosed on | August 14, 2026 |
| Accounts affected | 678,000 |
| Sector | Public sector |
| Country | France |
| Cause | Credential stuffing |
| Severity | Moderate |
| Status | Confirmed |

## Exposed data

- Full name
- Postal address
- Customer ID
- Employment data
- Other personal data

## What you can do

- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.

## Sources

- [La CNIL va contrôler le fisc après la cyberattaque de la DGFiP](https://www.cyberattaque.org/la-cnil-va-controler-le-fisc-apres-la-cyberattaque-de-la-dgfip/) — Cyberattaque.org
- [Accès illégitimes au système d'information de la Direction générale des Finances publiques : consulter la FAQ](https://www.economie.gouv.fr/actualites/acces-illegitimes-au-systeme-dinformation-de-la-direction-generale-des-finances-publiques-consulter-la-faq) — economie.gouv.fr
- [Cyberattaque contre la DGFiP : 678.000 usagers potentiellement concernés](https://www.legifiscal.fr/actualites-fiscales/4606-cyberattaque-contre-dgfip-678000-usagers-potentiellement-concernes.html) — LégiFiscal
- [Fuite de données à la DGFiP : ce que doivent faire les entreprises concernées](https://comptaverse.fr/posts/fuite-donnees-dgfip-entreprises-aout-2026/) — Comptaverse

_Entry built from the cited sources after a corroboration check, then reviewed before publication._

---

Equivalent HTML page : https://inyourgeek.com/en/fuites-de-donnees/2026-08-14-direction-generale-des-finances-publiques-dgfip
Published by InYourGeek — https://inyourgeek.com/en/a-propos
Method and safeguards : https://inyourgeek.com/en/methode
Full register : https://inyourgeek.com/en/fuites-de-donnees