French data leaks raise security concerns

Data breaches across various sectors in France have sparked worries about the safety of personal information. These leaks have increased the risk of scams, as criminals can use stolen data to create more convincing fraud attempts.

DGFiP breach affects 678,000 users

The Direction générale des finances publiques (DGFiP) confirmed a security breach in mid-August 2026. The incident involved stolen credentials from an employee and an authorized third party, potentially affecting 678,000 individuals and professionals. The leaked data includes tax numbers, addresses, and other personal details, but passwords and personal accounts remained secure.

National Education sector breach impacts millions

A data breach in the National Education sector occurred on July 25, 2026, affecting 346 million lines of data. After removing duplicates, the breach was found to involve 4.35 million staff identifiers and 1.22 million student records, dating back to 2005. The affected system did not store bank data or passwords, making it easier for scammers to exploit personal details for fraud.

Telecom and banking breaches expose sensitive info

Operators and banks have also suffered data breaches. In 2024, Free experienced a breach exposing 24 million subscriber contracts, including several million IBANs, leading to a 42 million euro fine in 2026. Bouygues Telecom faced a similar issue in 2025, affecting 6.4 million customers. These leaks can be used for small financial deductions and fake banking scams.

Health and social benefits data also compromised

Health and social benefits data leaks have been reported, with Mon Espace Santé denying a file of 34.2 million records in 2026. The CAF also contested claims of system flaws in 2025. Confirmed breaches in this sector include those from Viamedis and Almerys in 2024, affecting over 33 million people.

CNIL records record number of data breaches

The CNIL reported a record number of data breaches in 2025, with a 10% increase from the previous year. Phishing scams accounted for nearly a third of fraud-related assistance requests, up 70% from earlier years. Experts advise checking exposure on services like Have I Been Pwned, avoiding responses to suspicious messages, using two-factor authentication, and monitoring bank statements for unusual activity.