Question 17798 — digital

Summary

Mr. Jean-Michel Brard draws the attention of the Minister of the Economy, Finance and Industrial, Energy and Digital Sovereignty to the seriousness of the hacking suffered by the General Directorate of Public Finances (DGFiP) and to the need to draw all the consequences of this new attack on the security of the personal data of the French. On August 17, 2026, it was announced that the data of 678,000 individuals and professionals had been consulted or extracted following a cyberattack targeting the tax administration, including around 350,000 individuals. Among the information likely to have been stolen include first and last names, the family quotient, the reference tax income and the withholding tax rate. The DGFiP has started to individually inform the people concerned. This affair arouses legitimate concern among citizens. Tax data indeed constitutes particularly sensitive information. Their misuse could allow fraudsters to build extremely credible phishing operations, facilitate attempts at identity theft and, more broadly, prepare financial fraud. Knowledge of precise tax information can in particular allow a fraudster to pass yourself off more easily as an administration, a bank or an organization to an individual. This new attack also comes in a context of increasing leaks and cyberattacks affecting public organizations. A previous leak concerning the FICOBA file had already led parliamentarians to question the Government on the exposure of French people to the risks of identity theft and fraud banking. Many politicians have already demanded that all light be shed on the circumstances of this attack. Senators notably requested the creation of a parliamentary commission of inquiry, while the Government brought together an interministerial crisis unit. The Paris public prosecutor's office also opened a judicial investigation for, in particular, "fraudulent extraction of data" contained in a system of automated processing of personal data implemented by the State. If the judicial investigation must naturally continue its course, it appears essential that the national representation can also fully exercise its role of monitoring the Government's action. It is necessary to understand how an administration holding millions of particularly sensitive personal and tax data could have been this way. compromised, to identify possible human, technical or organizational flaws, to determine whether the resources devoted to the cybersecurity of the State are up to the threats which are likely to recur and to verify that the recommendations and alerts formulated during previous incidents have been followed up with effects. Beyond the identification of responsibilities, concerned citizens expect concrete measures. They must be able to be supported and protected against the potential consequences of this leak, in particular against the risks of identity theft, fraud and scams. Public authorities must also guarantee that victims have sufficiently precise information and simple systems enabling them to protect themselves against these risks and can be reassured. In this context, he asks him what measures immediate measures it intends to take in order to protect the 678,000 people concerned and prevent any fraudulent use of this stolen data, what additional resources will be devoted to securing the State's information systems, what responsibilities will be established at the end of the investigations. Finally, he asks what guarantees the Government intends to provide to all citizens so that such a situation does not cannot be reproduced and that the protection of data entrusted to the French administration is considered a first-order sovereign requirement.

Machine translation from French. The official text remains authoritative.

Timeline

No timeline events have been ingested for this record yet.

Votes

No vote records are attached yet.

Versions

No version snapshots stored. Document URLs remain at the source.

Documents

No documents linked.

Sponsors

No sponsors or actors listed by the source.

Related records

No cross-record relationships stored yet.