French tax authorities appear to have suffered a data breach affecting nearly 678,000 individuals linked to cryptocurrency holdings, according to a report from The Block. The exposure reportedly involves personal information tied to crypto declarations that French residents must file with tax officials when they hold digital assets on foreign platforms.
Details on how the breach occurred, and what specific data fields were compromised, remain limited. What is clear from the reporting is the scale. Nearly 678,000 people are affected, a figure that would rank among the larger crypto-adjacent data exposures reported to date.
The timing is significant. Crypto holders across Europe and beyond have faced a rising number of so-called wrench attacks in recent years. The term describes physical coercion, kidnapping, or home invasions aimed at forcing victims to hand over private keys or transfer funds. Unlike hacks that target exchanges or smart contracts remotely, these attacks require attackers to identify and locate real people who hold meaningful crypto wealth.
That is precisely why breaches like this one raise alarm inside the industry. Tax declarations tend to include names, addresses, and sometimes estimates of asset value. If that data reaches criminal networks, it can serve as a targeting list for exactly the kind of physical extortion security researchers have been warning about.
France requires residents to report foreign-held crypto accounts to tax authorities, a rule intended to close gaps in capital gains reporting. The requirement means French tax agencies hold a concentrated database of crypto holders, their contact details, and in some cases their approximate holdings. A breach of that database carries different risks than a typical financial data leak, given the direct link to identifiable, potentially wealthy individuals.
The crypto industry has already been grappling with a string of wrench-style incidents in France and elsewhere over the past two years. Several high-profile cases involved family members of crypto executives or known holders being targeted at their homes. Law enforcement agencies in multiple countries have acknowledged the trend, though coordinated policy responses have been slower to materialize.
This breach adds a new dimension to that conversation. Government-held tax data was, in theory, meant to be more secure than data held by private companies or exchanges. If confirmed, an exposure of this scale would suggest that even official government systems are not immune to the kind of failures that have plagued private crypto platforms.
Authorities have not yet detailed the exact circumstances of the breach or confirmed remediation steps. Questions remain about whether affected individuals have been notified, and what protective measures, if any, are being offered to those whose data was exposed.
Sources disagree on this story
This article was published before the reports below were compared. The reporting above stands; what follows is where the published accounts do not agree.
Reports on the DGFiP tax data breach agree on the scale of exposed records, but AMBCrypto and Decrypt cite conflicting Chainalysis-attributed figures for wrench attacks in France.
What all sources agree on
- A breach of France's tax authority (DGFiP) exposed data tied to roughly 678,000-678,437 people and businesses.
- Leaked data reportedly includes names, birthdates, addresses, phone numbers, email addresses, and tax income details.
- CertiK recorded 52 verified wrench attacks worldwide in H1 2026, with 33 in France.
Where the reports disagree
1Number of French wrench-attack incidents attributed to a recent Chainalysis report
Chainalysis reported 46 attacks through June, including 30 in France, with more than $30 million stolen.
But a recent Chainalysis report reported lower estimated losses of about $30M. However, it also flagged France as a hot spot (with 36 incidents), followed by the United States and Brazil.
Blockchain analytics firm Chainalysis recorded 30 publicly known violent crypto attacks in the country during just the first half of 2026, with losses exceeding $30 million.
What would settle it: Chainalysis's published mid-2026 crypto crime report
2Total record count in the hacker's own claim versus reported totals
According to the hacker's own account, the extraction was interrupted before it could be completed, leaving what they described as only a partial dataset of 678,438 records.
French reporting on the incident put the affected population at 678,437 people, although the final scope remains under investigation.
What would settle it: DGFiP's or the French Finance Ministry's official confirmation of the total number of affected records
What to make of it
Treat the roughly 678,000-record breach, the income breakdown, and the CertiK 33/52 wrench-attack figures as established across sources; the exact number of Chainalysis-attributed incidents in France (36 vs 30) is unresolved and should not be cited as a single settled figure until Chainalysis's own report is checked.
Market Impact
The immediate market impact of a tax data breach is unlikely to move token prices, but the security implications for individual holders could be significant. A leak connecting real identities to crypto wealth increases the physical risk profile for anyone on the list, independent of market conditions.
More broadly, the incident may intensify scrutiny of how governments collect and store crypto-related tax data. Regulators in other jurisdictions with similar disclosure requirements could face pressure to review their own data security practices, particularly as wrench attacks continue to be reported across the sector.
The breach underscores a growing tension between regulatory transparency requirements and the physical safety risks facing crypto holders. As governments collect more identifying data on digital asset owners, the security of that data becomes as important as the security of the assets themselves.
Frequently Asked Questions
What is a wrench attack in the context of crypto?
A wrench attack refers to physical coercion or extortion used to force a crypto holder to hand over private keys or transfer funds, as opposed to remote hacking methods.
How many people were affected by the French tax breach?
According to The Block, nearly 678,000 people connected to crypto holdings had personal data exposed in the breach.
Why does a tax data breach increase physical security risk for crypto holders?
Tax declarations often include names, addresses, and estimated asset values, which can help criminals identify and locate individuals worth targeting for extortion.
Has France said how the breach happened or who was responsible?
Specific details on the cause of the breach and any remediation steps had not been disclosed in the reporting available at this time.