Chandra Wijayanto
PARIS – A large-scale cyberattack scandal recently rocked the French Directorate-General of Public Finance (DGFiP), resulting in the theft of personal data belonging to approximately 700,000 individuals and business entities. This serious incident forced the Minister of Action and Public Accounts, David Amiel, to issue a public apology for the system vulnerabilities exposed. The data breach includes sensitive information, such as cadastral records and vital succession details.
Amiel asserted that the government takes every cybersecurity incident seriously, especially those involving citizens' data. We extend our sincere apologies for this hack targeting the DGFiP. Public data security is a top priority, and we are committed to addressing these vulnerabilities earnestly, Amiel stated during a press conference in Paris.
Initial investigation details indicate that the hack was not a simple attack. Hackers successfully penetrated what were considered robust security layers, highlighting the ongoing challenge of maintaining government data integrity in the digital age. Three types of data leaks have been identified:
- Basic personal data: including names, addresses, and taxpayer contact information.
- Cadastral data: revealing property information and land ownership.
- Succession or inheritance details: inherently highly sensitive and potentially exploitable for fraud or other financial crimes.
French authorities are now collaborating with national cybersecurity experts to identify the perpetrators and strengthen DGFiP's digital defenses. A thorough investigation is underway, aiming to uncover the security flaws exploited by the hackers.
This incident is not the first time a French government entity has faced a cyberattack. However, the scale and type of data stolen this time raise serious concerns among the public and cybersecurity observers. Important lessons must be learned from this tax hacking incident.
The French government is considering mitigation measures for the victims of the data breach. These include direct notification to affected individuals and companies, as well as providing credit or identity monitoring services to prevent misuse.
Cybersecurity experts emphasize the need for further investment in government digital security infrastructure. They argue that cyber threats will continue to evolve, requiring defense systems to be regularly and proactively updated.
This is a strong warning to all public institutions, said a cybersecurity expert from Sorbonne University. Cadastral and inheritance data are very attractive targets for cybercriminals due to their financial value. Governments must move faster than the hackers.
This hacking scandal has also sparked a national debate on data transparency and government accountability in protecting citizens' privacy. Many parties are demanding more detailed explanations of how the hack occurred and what concrete steps will be taken to prevent similar incidents from recurring.
Amiel previously emphasized the importance of international collaboration in facing cross-border cyber threats. The fight against cybercrime requires global efforts. We will work with our international partners to share intelligence and strategies, he added.
A data breach of this magnitude has the potential for long-term impacts on public trust in government institutions. This underscores the urgency for every country, including Indonesia, to continuously strengthen cybersecurity defenses amid an increasingly complex threat landscape in 2026.
Governments worldwide, including under the leadership of President Prabowo Subianto in Indonesia, have made cybersecurity a national priority. This French case serves as a tangible example of how crucial strong investments and policies are in protecting sensitive citizen data from cyberattacks.
Editorial Insight:
The data hack at DGFiP France is a significant blow to public trust and highlights the vulnerabilities of critical government digital infrastructure. This incident confirms that no system is entirely immune. Long-term impacts could include an increased risk of identity fraud for victims, as well as potential significant financial losses. The French government must immediately conduct a comprehensive security audit and transparently communicate recovery measures, while promoting cybersecurity awareness throughout the bureaucracy. Failure to do so could erode the state's digital legitimacy in the eyes of its citizens.
