French Tax Database Breach Puts Crypto Holders at Risk of Wrench Attacks
FrenchBreaches, a data breach monitoring website, said the database appeared to contain information on 1% of France’s population. The leak included names, dates of birth, residential addresses, phone numbers, email addresses, income information and tax identification numbers. It’s the latest in a series of breaches highlighting a physical security breakdown for digital asset holders in France.
French Tax Authority Hack Exposes Sensitive Data of Hundreds of Thousands
ZeroBytes hacked into a search portal inside the tax office and downloaded data of 678,437 private and business taxpayers. The portal was then closed to prevent further misuse.
The stolen database contains 27,000 taxpayers earning more than €100,000 annually, 386 taxpayers earning over €1 million and eight taxpayers who reported earning more than €10 million.
A database containing detailed identity information and precise physical location is currently being offered for sale on dark web forums for thousands of euros, providing accessible information to criminal organizations.
Chainalysis states that more than $30 million was stolen worldwide via “wrench attacks” in the first half of 2026 alone, and expects 2026 to exceed 2025’s record of $58 million stolen.
Leaked Lists of High-Net-Worth Individuals Surface on Dark Web
While the leak doesn’t specifically label taxpayers as owning crypto assets or not, the verified income amounts attached to complete names and home addresses offer crime rings a curated list of high-net-worth individuals.
| Total Taxpayer Records Exposed | 678,437 (~1% of French Population) |
| Taxpayers Earning > €100,000 | ~27,000 |
| Taxpayers Earning > €1,000,000 | 386 |
| Taxpayers Earning > €10,000,000 | 8 |
| Exposed Data Points | Names, DOB, Address, Phone, Income |
Researchers note buyers may use these tax files to cross-reference previous hacks targeting cryptocurrency exchanges or local tax records to identify potential crypto wallet holders.
French Attacks Confirm France As Global Hotspot For Violent “Wrench Attacks”
A recent increase in attacks, sometimes called “wrench attacks”, in which assailants employ violence, burglary, or intimidation to coerce victims into surrendering self-custodied crypto has shown renewed speed. France remains the global leader in these assaults.
Blockchain analysis company Chainalysis reported that France experienced 30 publicly recorded violent cryptocurrency attacks during the first six months of 2026. Laurent Nuñez, France’s interior minister said reported incidents overall exceed 70 cases across the country when including attempted extortion attempts and hostage taking.
Supply Chain Attacks and Collateral Damage
France’s Finance Minister confirms that a hacker attacked the General Directorate of Public Finances sometime during the last week of June. The hacker then downloaded data concerning individual and professional tax payers.
Supply chain leaks have also affected the tax agency before. French prosecutors were investigating a case where an employee of the tax department allegedly sold client records on cryptocurrency investors to criminal organizations. In early 2026, French crypto tax firm Waltio exposed data on 50,000 customers.
Supply chain risks don’t just impact cryptocurrency holders either:
- More than 40% of attacks on crypto owners are now directed at family members or acquaintances of the actual wallet owner in France.
- A French couple was robbed three times in less than a month after moving into a newly acquired residence because it had been inhabited by crypto millionaire former occupants named in a dark web data breach.
- Personal details belonging to close to 14,000 customers were accessed after a hacker intruded ShipMonk’s systems last year, according to a recent security breach announcement from cryptocurrency hardware wallet manufacturer Trezor. Those users’ physical shipping addresses were also accessed, affecting 11,742 customers.
Law Enforcement Reaction, Increased Security
Prosecutors in France handling organized crime cases for the JUNALCO have stepped up their investigations, resulting in almost 200 arrests and 88 prosecutions as of June 2026. The French Ministry of Interior also said they will be implementing a fast-alert system for endangered industry targets.
Cryptocurrency researchers recommend that anyone who holds cryptocurrency and lives in an area where privacy violations have occurred take additional precautions. These include utilizing cold storage solutions that require keys in different locations to sign a transaction (multisig), have a “burner” wallet with a low amount of crypto, and receive hardware wallets at an anonymous PO box, and “fly under the radar” when it comes to displaying wealth.
