France announces data security measures after multiple cyberattacks

This decision follows three cyberattacks that led to several data leaks, including fiscal, cadastral, and inheritance-related information. One leak affected at least 678,000 individuals and professionals, including approximately 350,000 taxpayers, with the theft of tax data. A second cyberattack compromised cadastral data, while a third involved inheritance information.

David Amiel, the French Minister for Public Service and Transformation of Public Action, acknowledged weaknesses in information systems and presented an action plan. This plan prioritizes combating account compromises for agents and enhancing their cybersecurity training. Amélie Verdier, Director General of the DGFiP, stated that over 100 employees among the 5,300 IT specialists in the tax administration are dedicated to cybersecurity.

She announced accelerated projects to secure agent access, including the widespread implementation of strong authentication. By the end of the year, all DGFiP agents will be equipped with USB security keys tokens to secure professional account connections. Immediate measures taken after the intrusions included removing access to certain applications and making the agent email portal inaccessible remotely.

The French government also plans to strengthen prevention against social engineering attacks by intensifying internal