A sophisticated cyberattack on France's tax agency has exposed the personal data of 678,000 taxpayers, including sensitive information on income and tax details. The breach, which occurred in late June, was claimed by a threat actor and has since been confirmed by the French tax administration. An immediate criminal investigation has been launched, with the cybercrime unit of the Paris Public Prosecutor's Office handing the probe over to France's dedicated cybercrime fighting office, OFAC. The attack is described as particularly sophisticated, highlighting the advanced tactics used by the threat actors involved1. The exposure of such sensitive data poses a significant risk to the affected individuals and businesses, who may now be vulnerable to targeted phishing attacks or identity theft. This incident underscores the importance of robust cybersecurity measures for government agencies handling sensitive citizen data, so what matters most to practitioners is the need to reassess and strengthen their own defenses against similar threats.