What is confirmed
The finance ministry describes access in June and July using impersonated credentials belonging to an official and an authorised third party, followed by data consultation and extraction affecting 678,000 individuals and businesses.
The listed data includes reference tax income, household quotient, withholding rate, company names, SIREN and cadastral records. The public portal and users' passwords were not compromised.
What it means
A message quoting real tax details could make a fake refund or adjustment notice more credible.
Access involving vacant estates data was reported as a separate episode on the tax website; do not merge the two scopes.
What to do
Visit impots.gouv.fr by typing the address yourself and follow individual notices from DGFiP.
If a text requests card details or an authentication code, check via an official channel before acting.
Use the related SecurCheck tool, then confirm important decisions with an official source.
