A massive leak of French tax records is now for sale online — and crypto holders could be in the crosshairs. What happened - A hacker is reportedly selling a dataset allegedly stolen from France’s tax authority, the DGFiP, following a breach in June. French cybersecurity outlet FrenchBreaches first published the report. - The cache reportedly covers roughly 678,000 entries: 392,867 individuals and 285,570 professionals. Samples of the data include names, birth details, home and email addresses, phone numbers, income figures, withholding tax rates, family status, dependents and tax-share information. - FrenchBreaches says the hacker used stolen VPN credentials and an internal search tool to extract the records in late June before access was cut off. The DGFiP has “officially confirmed the intrusion” and the investigation into how many people were affected is ongoing. - The seller is offering the files for several thousand euros (reported elsewhere as several thousand dollars). Why this matters to crypto users - The leak contains sensitive personal and financial details that can be used to craft highly convincing phishing messages, execute identity theft, or support targeted “wrench” attacks — where criminals use coercion or violence to force victims to hand over keys or crypto. - “More bad news for Bitcoiners living in the leading country for wrench attacks,” Jameson Loop, CSO at Bitcoin security platform Casa, warned on X after the disclosure. - The timing is worrying: security firms have documented a surge in wrench attacks against crypto holders. CertiK reported 52 such attacks worldwide in the first half of 2026 (33 in France), while Chainalysis counted 46 attacks through June (30 in France) with more than $30 million stolen. Chainalysis summed up the trend: criminals see crypto holders as high-value targets because their wealth can be moved instantly and irreversibly. What attackers can do with this data - With real tax records and contact info, scammers can create tailored, believable messages that bypass generic red flags — for example, impersonating tax services, banks, or trusted contacts to request transfers or private keys. - Detailed income and family data also make physical extortion or social-engineering approaches easier and more credible. Quick steps for crypto holders (practical precautions) - Assume personal contact details may be compromised; be extremely skeptical of unsolicited tax- or finance-related messages. - Use hardware wallets and multi-signature setups for large holdings to reduce the risk from coercion or social-engineering. - Enable strong, unique passwords and multi-factor authentication for all accounts; consider biometric- or device-bound 2FA rather than SMS where possible. - If you live in France or have dealings there, monitor for unusual tax notices and consider credit- or identity-monitoring services. Bottom line This leak is more than a bureaucratic embarrassment: it supplies attackers with real-world intelligence that can materially increase the risk to high-net-worth crypto holders. As investigators and French authorities probe the breach, now is a critical time for anyone holding significant crypto to tighten operational security and assume that more sophisticated phishing and physical-targeting attempts may follow. Read more AI-generated news on: undefined/news