法国税务部门已确认，黑客入侵了其信息系统，泄露了数十万纳税人和企业的敏感财务与个人数据——这一泄露事件也促使人们再次向比特币持有者发出警告，尤其是在一个既有数据泄露记录、也有针对加密货币的暴力犯罪历史的国家。

比特币开发者 Jameson Lopp 周五在 X 上发出警示，称这起泄露是“对生活在绞索攻击领先国家的比特币持有者来说又一个坏消息”。Lopp 创建了一个 tracker，用于统计全球范围内的绞索攻击——即使用暴力手段盗取加密货币的事件；该追踪器在 GitHub 上公开维护。此类事件中有相当一部分发生在法国，而法国此前也曾发生过数据泄露，这凸显出：在一次泄露中暴露的个人信息，之后可能被用于针对可识别目标的诈骗或勒索。

对生活在绞索攻击领先国家的比特币持有者来说，又是一个坏消息。法国税务机关遭黑客入侵，678K 条记录泄露。26,805 人的收入超过 100K€ 386 人的收入超过 1M€ 8 人的收入超过 10M€

— Jameson Lopp (@lopp) August 14, 2026

The news comes one day after hardware wallet manufacturer Trezor announced a data breach exposing customer data.

Cybersecurity researchers at FrenchBreaches, who reviewed samples of the leaked data, reported that the affected records break down to roughly 392,867 individuals and 285,570 businesses. Among the individuals, an estimated 26,805 have a reported annual taxable income of €100,000 or more, 386 exceed €1 million, and eight exceed €10 million. The hacker is said to be offering the full dataset for sale for several thousand euros.

The breach first surfaced publicly on August 12, when a hacker using the alias “ZeroBytes” posted on a cybercrime forum claiming to have infiltrated internal DGFiP servers and obtained VPN credentials that unlocked an internal lookup tool covering millions of taxpayers. According to the hacker’s own account, the extraction was interrupted before it could be completed, leaving what they described as only a partial dataset of 678,438 records.

The exposed sample reportedly includes highly sensitive information: full legal names, dates and places of birth, home and mailing addresses, marital status, number of dependents, internal tax identification numbers, reference taxable income, individual withholding tax rates, phone numbers, email addresses, and records of past correspondence with tax officials. 对于持有加密货币或公开与加密货币相关的人士而言，这类身份与联系方式的组合，即使没有钱包或密码，也会让冒充尝试显得更为可信。

Security analysts warn that this combination of identity, contact and financial data could fuel highly convincing phishing campaigns impersonating tax authorities, as well as identity theft and fraud schemes tailored to victims’ income levels or family circumstances.

The leak comes after a record year for such crimes. 2025 was the worst on record for wrench attacks — crypto-targeted kidnappings — with around 55 reported globally last year, according to TRM Labs. Lopp’s tool counted over 70 throughout last year. This year is already looking bad, according to the tracker: 54 attacks have been documented so far.

Wrench attacks made headlines last year when criminals kidnapped David Balland, co-founder of crypto hardware wallet brand Ledger, and his wife in France. The pair was held for around 24 hours before they were rescued by the French authorities.

This post first appeared on Bitcoin Magazine and is written by Mathew Di Salvo.