Two Suspects Arrested in Hacking of French Tax Office

An 18 year old man has been indicted and placed in pretrial detention following the hacking of the Direction générale des finances publiques (DGFiP). The suspect is an alleged member of the ZeroBytes hacking group and is accused of stealing data from 678,000 taxpayers during incidents in late June and late July. A second suspect, aged 16, was arrested on August 26 but later released; however, investigators will use the equipment seized from the minor.

The 18 year old suspect, who resides in the Paris region, is charged with fraudulent access and maintenance of a personal automated data processing system in an organized gang, as well as the fraudulent modification, extraction, and transmission of such data. He is also charged with participating in a criminal association. Investigators believe the suspect may also be responsible for recent attacks on France Travail, SFR, and the Ministry of National Education. Records indicate the man had previously been indicted in January 2025 and June 2024 for other cyberattacks while under judicial supervision. The investigation continues to identify other individuals involved in the breach.