General Directorate of Public Finances

Profile narrative

The General Directorate of Public Finances, also referred to as DGFP, is identified as a France-headquartered public-sector organisation associated with public finances. The supplied information does not define a detailed service catalogue, customer segments, or operational mandate. It does establish that the organisation maintains systems containing taxpayer information. This confirms a direct connection between DGFP and taxpayer records, although it does not establish every function performed by the organisation. Its known aliases are General Directorate of Public Finances and DGFP. Its headquarters location is France. No further geographic footprint or service reach is stated.

On 1 June 2026, the French Ministry of Finance confirmed that a malicious actor had broken into DGFP systems. The confirmation prompted an investigation into the scope of taxpayer-data exposure. FrenchBreaches reported that the attackers claimed the breach involved data concerning nearly 700,000 taxpayers. That figure is an attacker claim reported by FrenchBreaches, not a confirmed impact total in the supplied material. The ministry stated that affected users would receive personalized notices. Those notices were intended to explain what information may have been viewed or extracted and to identify precautionary steps users should take. The incident provides the clearest available evidence of DGFP’s connection to sensitive taxpayer records. It also places the organisation in the context of a cybersecurity event involving unauthorized system access and potential data exposure. The available information does not identify the intrusion method, duration, responsible actor, or technical controls involved.

The material does not state DGFP’s workforce, budget, number of offices, annual transaction volume, or other measures of institutional scale. It also does not specify whether the directorate has subsidiaries, controlled entities, or a broader organisational group structure. The reference to the French Ministry of Finance establishes that the ministry communicated about the incident, but the supplied text does not explicitly describe the full ownership or reporting relationship. No additional competencies, regulatory powers, certifications, or sector rankings are provided. The evidence supports a narrow profile of DGFP as a France-based public-finance organisation whose systems hold taxpayer data and were subject to a confirmed breach in June 2026. The confirmed facts do not support more detailed claims about its mandate, reach, or organisational structure.

Incidents

1 incident linked to this organisation.