French prosecutors probe crypto tax data breach

TLDR

French prosecutors are investigating a major data breach at French crypto tax platform Waltio that exposed personal information for tens of thousands of crypto taxpayers.

1. Waltio reported a sophisticated breach, with hackers claiming data on about 50,000 users and sending an extortion demand, triggering a probe by the Paris cybercrime unit.
2. Authorities warn the leaked tax data could enable both scams and physical wrench attacks, including kidnappings targeting known crypto holders in France.
3. Key next steps are clarifying exactly what was stolen, how regulators respond on data security, and how Waltio and users harden their operational security.

Deep Dive

1. What Prosecutors Are Investigating

French authorities have opened a preliminary investigation into a data breach at cryptocurrency tax platform Waltio, which serves around 150,000 users in France and nearby countries. Reports say the hacker group Shiny Hunters obtained personal data for roughly 50,000 users and issued a ransom demand to the company.

The Paris Public Prosecutors cybercrime unit has assigned the case to Frances National Cyber Unit to determine the scope of the breach and identify affected users, according to official notices summarized in a CoinsKid community update and coverage from Cointelegraph.

Waltios CEO has said the company filed a criminal complaint for attempted extortion and unauthorized access to an automated data system, describing the attack as particularly sophisticated, while stressing that core services and client funds remain operational.

2. What Data Was Exposed And Why It Is So Sensitive

According to Waltios statements, the exposed information mainly includes user email addresses and summary details from 2024 tax reports, such as capital gains, losses, and year?end portfolio balances, but not passwords, bank data, or wallet addresses, as reported by Coinspeaker.

Even without direct keys or bank details, this kind of dataset is dangerous. It tells attackers who in France has taxable crypto holdings and roughly how large they are, which can be combined with other leaks or OSINT to build high?value target lists.

French cybersecurity authorities explicitly warned that affected users could face social?engineering scams (fraudulent security calls or emails) and even physical coercion. Officials referenced recent wrench attacks where criminals use home invasions or kidnappings to force victims to transfer crypto, a pattern also highlighted in CMCs summary.

3. What To Watch Next And How Users Can React

The investigation aims to clarify three things that matter for users and the wider market:

1. The precise content of the stolen database (emails only, or also names, phones, addresses).
2. Whether the data advertised for sale on dark?web markets fully matches Waltios customer base.
3. Whether this triggers broader regulatory or MiCA?related scrutiny of data security at crypto service providers in France.

For individual users, the practical focus is operational security, not price action. Anyone who suspects they may be affected should be skeptical of unsolicited calls or emails about tax issues, verify any Waltio or tax?authority communication through official channels, and separate their email identity from high?value wallets where possible.

Conclusion

French prosecutors probing the Waltio data breach are treating it as a serious cyber?extortion case because it exposes a map of real?world crypto wealth, not just login credentials. For crypto users in France, the immediate impact is elevated social?engineering and physical?security risk, while longer term it is likely to accelerate regulatory focus on how tax and tracking platforms store sensitive crypto data.