France's tax authority (DGFiP) has confirmed a data breach affecting approximately 600,000 individuals and businesses, with stolen information including tax identification numbers, personal details, and for around 250 people, the actual contents of private messages exchanged with the authority. Affected parties are being notified and warned of potential follow-on attacks such as phishing and impersonation scams exploiting the stolen data. The incident is the latest in a series of significant cybersecurity breaches targeting French public sector organisations in 2025.
