Bitcoiners have been warned after France’s tax administration confirmed that hackers breached its info system, exposing delicate monetary and private knowledge belonging to a whole bunch of 1000’s of taxpayers and companies.
Writing on X on Friday, Bitcoin developer Jameson Lopp mentioned the leak was “extra unhealthy information for Bitcoiners residing within the main nation for wrench assaults.”
Lopp has created a tracker counting wrench assaults — when bodily violence is used to steal crypto — internationally. A big quantity occurs in France, the place knowledge has been leaked earlier than.
The information comes in the future after {hardware} pockets producer Trezor introduced a knowledge breach exposing buyer knowledge.
Cybersecurity researchers at FrenchBreaches, who reviewed samples of the leaked knowledge, reported that the affected information break right down to roughly 392,867 people and 285,570 companies.
Among the many people, an estimated 26,805 have a reported annual taxable revenue of €100,000 or extra, 386 exceed €1 million, and eight exceed €10 million. The hacker is alleged to offer the total dataset on the market for a number of thousand euros.
The breach first surfaced publicly on August 12, when a hacker utilizing the alias “ZeroBytes” posted on a cybercrime discussion board claiming to have infiltrated inner DGFiP servers and obtained VPN credentials that unlocked an inner lookup instrument overlaying hundreds of thousands of taxpayers.
In response to the hacker’s personal account, the extraction was interrupted earlier than it could possibly be accomplished, leaving what they described as solely a partial dataset of 678,438 information.
The uncovered pattern reportedly contains extremely delicate info: full authorized names, dates and locations of delivery, residence and mailing addresses, marital standing, variety of dependents, inner tax identification numbers, reference taxable revenue, particular person withholding tax charges, telephone numbers, electronic mail addresses, and information of previous correspondence with tax officers.
Safety analysts warn that this mixture of identification, contact and monetary knowledge might gasoline extremely convincing phishing campaigns impersonating tax authorities, in addition to identification theft and fraud schemes tailor-made to victims’ revenue ranges or household circumstances.
2025 was the worst on file for wrench assaults (crypto focused kidnappings), with round 55 reported globally final yr, based on TRM Labs. Lopp’s instrument counted over 70 all through final yr. And this yr is already wanting unhealthy, based on the tracker: 54 assaults have been documented to this point.
Wrench assaults made headlines final yr when crooks kidnapped David Balland, co-founder of crypto {hardware} pockets model Ledger, and his spouse in France.
Criminals held the pair for round 24 hours earlier than they have been rescued by the French authorities.
