This is a translation of part of an email I received yesterday about a hack, from the French tax site (DGFiP, Directorate General Finance Publique).
Thursday, August 13, 2026, a malicious actor claimed to have accessed data from the information system of the General Directorate of Public Finances (DGFiP) at the end of July and the beginning of August, using the stolen credentials of a third party authorized by the DGFiP.
You are receiving this message because you are affected by this malicious act.
*What data might have been accessed? *
Your personal information, your home address, your technical ID, and public information regarding your cadastral [land registry] data (parcel ID / its size / type of cultivation / parcel address and your rights concerning the property, for example, owner). The description of any buildings on these parcels was not accessed. This data is freely available to anyone who requests it and is therefore not confidential.
Important: your tax ID and your password for accessing your Public Finances account on impots.gouv.fr were not compromised. Your tax returns and notices were not accessed.
The tax office also holds my bank data, as one has to pay tax by direct debit as they no longer accept cheques. So much for protecting my information.