Bitcoiners have been warned after France’s tax administration confirmed that hackers breached its info system, exposing delicate monetary and private information belonging to tons of of 1000’s of taxpayers and companies.
Writing on X on Friday, Bitcoin developer Jameson Lopp stated the leak was “extra dangerous information for Bitcoiners dwelling within the main nation for wrench assaults.”
Lopp has created a tracker counting wrench assaults — when bodily violence is used to steal crypto — the world over. A big quantity occurs in France, the place information has been leaked earlier than.
The information comes at some point after {hardware} pockets producer Trezor introduced an information breach exposing buyer information.
Cybersecurity researchers at FrenchBreaches, who reviewed samples of the leaked information, reported that the affected data break right down to roughly 392,867 people and 285,570 companies.
Among the many people, an estimated 26,805 have a reported annual taxable earnings of €100,000 or extra, 386 exceed €1 million, and eight exceed €10 million. The hacker is alleged to offer the complete dataset on the market for a number of thousand euros.
The breach first surfaced publicly on August 12, when a hacker utilizing the alias “ZeroBytes” posted on a cybercrime discussion board claiming to have infiltrated inner DGFiP servers and obtained VPN credentials that unlocked an inner lookup instrument masking tens of millions of taxpayers.
In accordance with the hacker’s personal account, the extraction was interrupted earlier than it may very well be accomplished, leaving what they described as solely a partial dataset of 678,438 data.
The uncovered pattern reportedly contains extremely delicate info: full authorized names, dates and locations of beginning, house and mailing addresses, marital standing, variety of dependents, inner tax identification numbers, reference taxable earnings, particular person withholding tax charges, telephone numbers, e-mail addresses, and data of previous correspondence with tax officers.
Safety analysts warn that this mixture of id, contact and monetary information may gas extremely convincing phishing campaigns impersonating tax authorities, in addition to id theft and fraud schemes tailor-made to victims’ earnings ranges or household circumstances.
2025 was the worst on file for wrench assaults (crypto focused kidnappings), with round 55 reported globally final yr, in keeping with TRM Labs. Lopp’s instrument counted over 70 all through final yr. And this yr is already wanting dangerous, in keeping with the tracker: 54 assaults have been documented up to now.
Wrench assaults made headlines final yr when crooks kidnapped David Balland, co-founder of crypto {hardware} pockets model Ledger, and his spouse in France.
Criminals held the pair for round 24 hours earlier than they had been rescued by the French authorities.