Question 17800 — digital

Summary

Mr. Thierry Frappé draws the attention of the Minister of Action and Public Accounts to the serious cybersecurity flaws recently revealed within the General Directorate of Public Finances. Two intrusions occurring at the end of June and July 2026 led to the theft of data concerning at least 678,000 individuals and professionals as well as around 200,000 accounts present in the cadastral files. These files contain particularly sensitive information such as the reference tax income, the family quotient or the withholding tax rate, exposing the people concerned to increased risks of phishing, identity theft or targeted scams. These incidents also occur only a few months after illegitimate access to the national file of bank accounts and similar (Ficoba), themselves made possible by the usurpation of the identifiers of an authorized agent. A new leak regarding the Vacant Estates Portal has also been revealed. Faced with this succession of incidents, the Government announced an in-depth audit as well as several emergency measures, including the generalization of double authentication and the organization of regular systems testing exercises. computers. Other European states facing massive cyberattacks for several years, like Estonia, have however developed a real resilience strategy based in particular on reinforced authentication, permanent exercises, close cooperation between public and private actors as well as the mobilization of specialized experts. He therefore asks him what structural measures, beyond the answers emergency measures already announced, the Government intends to implement in order to avoid further compromises of DGFiP systems, to sustainably guarantee the security of French tax data and to more broadly strengthen the administration's capacity to prevent, detect and contain cyberattacks.

Machine translation from French. The official text remains authoritative.

Timeline

No timeline events have been ingested for this record yet.

Votes

No vote records are attached yet.

Versions

No version snapshots stored. Document URLs remain at the source.

Documents

No documents linked.

Sponsors

No sponsors or actors listed by the source.

Related records

No cross-record relationships stored yet.