DGFiP in the news

Multiple French public sector entities suffered data breaches and exfiltrations during the summer, primarily due to a Metabase vulnerability and other cyberattacks.

An ANSSI report revealed that the cyberattack on the DGFiP was caused by security flaws in identity, network architecture, and detection, leading to data compromise of taxpayers and businesses.

The Anssi report on DGFiP's data theft reveals structural vulnerabilities due to exploited weaknesses in authentication, system compartmentalization, and incident detection.

The French tax administration (DGFiP) experienced a data breach impacting 700,000 individuals and businesses due to security weaknesses in identity, system architecture, and detection, exploited by the hacker Zerobytes.

A report by the ANSSI revealed that cyberattacks against the DGFiP exploited vulnerabilities in identity management, network segmentation, and particularly, a failure to correlate multiple suspicious security signals, leading to undetected data exfiltration.

The DGFiP's IT systems had many weaknesses that led to a data breach affecting over 600,000 individuals and professionals, as revealed by a report from the Anssi.

France's tax administration suffered a data breach impacting hundreds of thousands of taxpayers and businesses due to weak security and monitoring failures.

A report by the French National Agency for the Security of Information Systems (ANSSI) detailed how simple vulnerabilities like stolen passwords and lack of multi-factor authentication led to a massive data breach at DGFiP, impacting 680,000 taxpayers.

France's tax administration (DGFIP) suffered a data theft affecting over 600,000 individuals and businesses due to stolen staff passwords and significant security vulnerabilities.

A report on the 2026 DGFiP cyberattack highlights how stolen credentials and weak security measures led to undetected data exfiltration.

The ANSSI report reveals the DGFiP data breach resulted from stolen credentials, no multi-factor authentication, and undetected data exfiltration, compromising hundreds of thousands of users.

Property tax notices from DGFiP may not show pre-payments, causing confusion for taxpayers.

The French Public Finances Directorate will collect income tax from 14 million taxpayers on September 25, 2026, with payments over 300 euros split into four installments.

The Essonne Public Finance Department is recruiting young adults aged 18-25 for an 8-month civic service mission assisting users, with a deadline of October 15th.

The DGFiP guide outlines what is still permissible regarding invoicing despite new electronic rules, addressing common issues like varied reception formats and software processing problems.

The article from Solidaires Finances Publiques underscores the critical importance of IT services and public finance agents within the DGFiP for effective tax collection and public service delivery.

The French tax administration has issued a FAQ for professionals after a data breach, outlining risks and precautions.

A DGFiP data breach exposed 678,000 taxpayers to risks from combined income and address information, potentially enabling serious criminal targeting.

A lawyer warns that the DGFiP data breach, which exposed income and addresses of 678,000 taxpayers, creates a risk of physical harm and details legal options for compensation.

The CNIL will investigate the DGFiP's premises to understand a massive tax data hack and determine appropriate sanctions.