Bitcoin Holders Face Wrench-Attack Risk After France Leaks 678K Tax Records

Crypto News

A breach of France's tax authority has exposed the financial records of hundreds of thousands of taxpayers, sharpening security concerns for Bitcoin (BTC) and altcoin holders already targeted by physical extortion. The Direction Générale des Finances Publiques (DGFiP) confirmed that hackers penetrated its information systems, leaking sensitive personal and financial data. Bitcoin developer Jameson Lopp flagged the incident Friday, describing it as fresh bad news for Bitcoiners in the country that already leads the world in so-called wrench attacks — crimes in which victims are threatened or harmed until they surrender control of their crypto. By Lopp's tally the exposed dataset contains 678,438 records. Cybersecurity researchers at FrenchBreaches, who examined samples, split that figure between roughly 392,867 individuals and 285,570 businesses. Within the individual cohort, an estimated 26,805 report annual taxable income of at least €100,000, 386 declare more than €1 million, and eight declare more than €10 million. The actor, operating under the alias ZeroBytes, first appeared August 12 on a cybercrime forum claiming to have used stolen VPN credentials to reach an internal DGFiP lookup tool; the extraction was reportedly cut short, leaving a partial trove now advertised for sale at a few thousand euros. The exposed fields range from full legal names, birth details, and home addresses to marital status, dependents, internal tax identifiers, taxable income, withholding rates, phone numbers, emails, and past correspondence with officials. Analysts warn that blend could power convincing phishing that impersonates tax authorities, dangles bogus airdrop giveaways, or pushes counterfeit AI crypto wallet apps. The disclosure arrives a day after hardware-wallet maker Trezor reported its own customer-data breach. Wrench attacks have been rising: 2025 marked an all-time high, with about 55 cases reported globally according to TRM Labs and more than 70 logged by Lopp's tracker, and 54 already documented this year. The danger made headlines last year when Ledger co-founder David Balland and his wife were kidnapped in France and held roughly a day before rescue.

In the UK, Reform leader Nigel Farage is once again under parliamentary scrutiny over millions of dollars in crypto-linked donations, an inquiry that resumed after he reclaimed his seat. The UK Parliamentary Commissioner for Standards — the watchdog that polices MPs' conduct — listed Farage Friday as under investigation for alleged failure to register an interest, tied to gifts and donations from two figures connected to the crypto industry. The probe had been paused in July when Farage stepped down as a member of Parliament, then restarted once he won Thursday's by-election in Clacton, a contest with no major-party challengers. At the center are two relationships: cryptocurrency billionaire Christopher Harborne, who gave Farage $6.7 million, and George Cottrell, a convicted fraudster linked to a crypto casino who bankrolled the Reform leader's staff and security. Parliamentary rules require newly elected members to register all current financial interests within one month of taking office, plus any benefits received over the preceding twelve months. Farage first characterized Cottrell's contribution as a reward for his Brexit campaigning and later framed both men's support as gifts offered without conditions. Should the commissioner conclude the rules were broken, Farage could face suspension from Parliament, a step that might force yet another by-election. Thursday's vote saw Farage capture 63% against satirical candidate Count Binface's 27%, a result then-Labour leader Keir Starmer branded a desperate stunt; Andy Burnham has since become prime minister. The broader fallout is already shaping policy: Labour lawmakers have floated making a moratorium on crypto donations, introduced in March, permanent, citing the risk of foreign influence. A loophole highlighted by the International Bar Association lets unincorporated associations give more than $675 directly to UK politicians, potentially channeling opaque money. That gap makes it harder to police political cash from digital-asset figures even as scrutiny intensifies.

COINOTAG's reading is that both episodes expose the same pressure point: as crypto wealth grows, the data and donations surrounding it draw criminal and political attention. The load-bearing evidence is official. The UK Parliamentary Commissioner for Standards' register — the primary record — lists Farage under investigation for failure to register an interest, confirming the probe's formal basis rather than hearsay. DGFiP's own confirmation of the intrusion, not rumor, establishes that taxpayer data was compromised, while Lopp's tally puts the scale at 678,438 records. For holders the practical takeaway is operational security: income-linked information now circulating raises the odds of targeted coercion and tailored phishing.