"The State has put a target on your back": what are the risks for French citizens affected by the tax website hack?

Following the large-scale cyberattack that affected the Directorate General of Public Finances (DGFiP), Clément Domingo, alias SaxX, a cybersecurity expert, warned on Monday, August 17, about the risks to which the French people concerned are exposed.

A cyberattack that is causing concern even among professionals in the sector. Following confirmation of an attack on the website of the French Public Finances Directorate (DGFiP), many questions remain. In total, more than 678,000 individuals and businesses are affected by the data breach and will be contacted starting this Monday, August 17.

Given the scale of the breach, Sébastien Lecornu will also lead an interministerial crisis team on the matter this Monday. "This is the worst cybersecurity attack in France," notes Clément Domingo, aka SaxX, a cybersecurity expert and guest on RMC's 5/7 Le Morning show.

"We're talking about the last bastion that was supposed to be the most secure, which has just fallen. The idea that highly sensitive data can leak out like that without the tax authorities noticing raises a lot of questions," he warns.

France's lack of preparedness on the subject

The most striking aspect of this attack remains its timing. It took place in June, but the government only confirmed it on Thursday, August 13, after a cybercriminal claimed responsibility on the Dark Web. "This information is completely insane," Clément Domingo told RMC.

"We only discovered this attack seven weeks later. If other countries see this, what will happen when real powers actually start attacking France with far greater resources and much better-prepared personnel?"

Now that the breach has occurred, what are the risks for those affected? As with any data breach, there will likely be an increase in phishing attempts. A scammer could try to impersonate a trusted third party to steal your banking information.

"Today, for scams, having this level of detail will allow someone to impersonate the tax authorities. This will allow them to swindle you out of money. In the age of AI, with a few simple phrases, you can copy the tax website," explains the ethical hacker, who legally tests the security of a company's computer systems with its consent.

Even worse, with such sensitive data, the possibility of an extortion attempt or burglary cannot be ruled out, according to the expert. "When I know your taxable income and where you live, you have a target on your back. The state is putting a target on your back. Some people will have to move," asserts Clément Domingo.

Be careful if you receive a tax call: what we know after the cyberattack on the tax platform

To avoid any risk, be extra vigilant. Never respond directly to requests and always verify the email address. When calling, always call back the official number of the French Public Finances Directorate (DGFiP).