678k Tax Records Leaked as France Leads Global Surge in Crypto Physical Attacks

Woofun AI reports that a cyberattack on the General Directorate of Public Finances has exposed the personal and financial data of hundreds of thousands of taxpayers, raising urgent concerns within the crypto community regarding identity-linked security risks.

The compromised dataset encompasses names, dates of birth, addresses, telephone numbers, email addresses, and tax-related details for 678,437 people. Among those affected, nearly 27,000 individuals declared income of at least €100,000, while 386 reported earnings exceeding €1 million and eight surpassed €10 million, creating a high-value target list for malicious actors.

Criminals leverage this granular data to construct precise profiles by correlating tax records with public blockchain activity and social media profiles, particularly for Bitcoin holders. This digital profiling fuels a rise in physical violence; CertiK recorded 52 verified wrench attacks globally in the first half of 2026, with France accounting for 33 cases, including a sharp increase in home invasions.

Woofun AI data shows that the incident underscores that self-custody via Non-custodial wallets protects private keys from centralized databases but does not shield personal identity from exposure. A separate August breach involving Trezor's logistics provider ShipMonk further illustrates this vulnerability, where nearly 14,000 customers had their names, addresses, phone numbers, and emails exposed despite Trezor confirming its own systems and devices remained uncompromised.

To mitigate these risks, users must adopt privacy-conscious security practices, such as separating public identities from wallet activity and treating unsolicited credential requests as potential phishing attempts. For the industry, integrating privacy tools and stronger operational security is essential to complement self-custody, ensuring that Blockchain transparency for auditing does not inadvertently facilitate the linking of financial activity to real-world identities.

This convergence of data breaches and physical crime marks a critical inflection point where protecting financial activity requires robust safeguards for real-world identity. The era of relying solely on cryptographic security is ending as attackers increasingly exploit the human element.