French police arrest two ZeroBytes suspects DGFiP data breach affects at least 678,000 people

On September 5, LeParisien reported that French police had arrested two suspects suspected of participating in the ZeroBytes hacking organization, and one of the 18-year-old suspects had been charged and detained. ZeroBytes previously attacked the French General Revenue Service (DGFiP), and officials confirmed that the data of at least 678,000 individuals and businesses had been affected, including names, tax information and contact information;ZeroBytes previously claimed to have sold some of the stolen tax data to buyers. Recently, counterfeit DGFiP paper letters targeting Crypto holders have also appeared in France. Scammers used DAC8 digital asset declaration to induce recipients to scan QR codes to enter phishing websites and steal wallet information. Security researchers pointed out that the appearance of these fraudulent letters highly coincides with the DGFiP data leak, but there is currently no evidence to confirm that the address data used by the scammers directly came from this leak.