Quick Summary
France’s tax authority — the DGFiP — just got hacked. 678,438 records leaked: full names, home addresses, incomes, phone numbers, emails, tax IDs. The dataset includes 26,805 people earning over €100,000 a year, 386 over €1 million, and eight over €10 million. The hacker is selling the whole thing for a few thousand euros. France is the number-one country in the world for crypto wrench attacks. Bitcoiners just got a very loud warning.
What Happened
On August 12, a hacker using the alias "ZeroBytes" posted on a cybercrime forum claiming to have infiltrated DGFiP’s internal systems. Their method? Stolen VPN credentials that unlocked an internal lookup tool covering millions of French taxpayers.
The extraction was interrupted — the hacker admits the dataset is partial: roughly 392,867 individuals and 285,570 businesses. But "partial" is doing a lot of work here:
- 26,805 individuals with a reported annual taxable income of €100,000 or more
- 386 exceeding €1 million
- Eight exceeding €10 million
- Full legal names, dates and places of birth, home and mailing addresses, marital status, number of dependents, internal tax identification numbers, reference taxable income, individual withholding tax rates, phone numbers, email addresses, and records of past correspondence with tax officials
Security analysts say this combination can fuel highly convincing phishing campaigns impersonating tax authorities, plus identity theft and fraud tailored to each victim’s income level and family circumstances.
Read that list again. The state demanded all of this data — "to fight crime," "to catch tax evaders," "to protect you." Then it proved it can’t protect a single byte of it. One day earlier, hardware wallet maker Trezor announced its own customer data breach. The institutions you’re told to trust with your identity and your money keep leaking like sieves. And remember what happened the last time a government tried to hold Bitcoin? The U.S. government’s own custody operation had an insider stealing $40M in seized funds (we covered that here). The state is just another database — with worse security and no consequences.
The Wrench Economy
Here’s where this stops being a privacy annoyance and becomes a life-or-death story for Bitcoiners.
France is the world capital of wrench attacks — physical violence used to force people to hand over their crypto. According to TRM Labs, 2025 was the worst year on record, with around 55 wrench attacks globally. Jameson Lopp’s wrench attack tracker counted over 70. This year is already worse: 54 attacks documented so far in 2026.
Last year, criminals kidnapped David Balland — co-founder of hardware wallet maker Ledger — and his wife in France. They were held for around 24 hours before rescue.
Now imagine this: attackers buy a dataset for a few thousand euros. It tells them who earns €100K+. It gives them home addresses, family details, phone numbers. It tells them exactly who looks profitable to grab. And in France, the people most likely to hold crypto are precisely the people the state has been tracking most aggressively.
Bitcoiners who self-custody are the ones with a target on their backs. The state’s records stitch together everything you’ve ever touched. Bought Bitcoin on a KYC exchange? Declared your stack? It’s in the leak. You don’t need to be a whale. You just need to look like you might hold something.
What You Do About It
- Assume every KYC trail you’ve ever left is public. The French state couldn’t protect its own tax records. What makes you think a brokerage, an ETF custodian, or an exchange can protect yours? (Here’s the ETF custody argument, debunked)
- Self-custody is non-negotiable. If the wrench comes, the fight is physical. If your coins sit with a custodian, the state can seize them with a subpoena. Your keys, your coins — here’s how to choose a wallet without getting wrecked.
- Your stack is a secret. Treat it like one. Don’t tell people. Don’t flash it. The hardest lesson of the Coldcard entropy disaster wasn’t about weak seeds — it’s that the enemy is always closer than you think.
- Privacy is a security feature, not a luxury. Every additional database that knows you hold Bitcoin is another database that can leak, get sold, or get subpoenaed. Fewer copies of your identity = fewer targets on your back.
FAQ
Was my tax data leaked?
If you’re a French taxpayer, possibly. The breach covers 678,438 records — a partial dataset. Watch for phishing emails impersonating DGFiP; the attackers have real names, addresses, and tax IDs to weaponize.
Was Bitcoin itself hacked?
No. The Bitcoin network wasn’t touched. The state leaked your data — the same data it demands from you at the point of a KYC form.
Is this really about Bitcoin?
Yes. France is the #1 wrench-attack country on Earth, and the leak hands attackers a freshly-enriched list of exactly who’s worth kidnapping. Bitcoiners with any KYC footprint are in that list.
Should I sell my Bitcoin?
This is not financial advice, and selling is the wrong lesson. Custody and privacy are the issue, not the asset. The people who got wrenched in 2025 lost coins and the pain. The people who stayed private weren’t on the list.
Final Thoughts
The French state collected your financial life "to protect you," leaked it to criminals, and will now spend months pretending to investigate itself. Meanwhile, the country that leads the world in crypto kidnappings just got a fresh target list — priced to move.
Hardware wallets, VPNs, split seeds — none of it helps if the attacker knows your name, your address, and your income before they even knock. The only real defense is not being in the database at all.
Take custody before the next leak finds you. Coupon: LOVEISBITCOIN — https://loveisbitcoin.com/bull
The state is collecting your data whether you hold Bitcoin or not. So the question isn’t whether you trust them with it. It’s what happens when they hand it to a kidnapper.
Are you still okay with KYC?
Source: Bitcoin Magazine, TRM Labs, Jameson Lopp’s wrench attack tracker
FRANCE’S TAX AUTHORITY JUST LEAKED 678,000 RECORDS — NAMES, ADDRESSES, INCOMES. GUESS WHO GETS WRENCHED NEXT.
