French Government Housing Platform Hit in Latest Cyberattack by ZeroBytes Group
In another major cybersecurity incident targeting French government systems this summer, the hacking group ZeroBytes claims to have breached the "Zéro logement vacant" platform, a housing website used by local authorities to manage vacant properties. The group announced the attack on a cybercriminal forum, alleging they exfiltrated 149 million records though the exact number of affected individuals remains unclear due to potential data duplication.
The compromised platform, which is not publicly accessible but used by government agencies and property owners, was reportedly taken offline on Sunday afternoon. While the French government has not confirmed the breach, cybersecurity outlet FrenchBreaches reported that the stolen datasets include 82 million ownership records, 66 million records from French tax authorities, and sensitive account details. Among the exposed data are 10,700 unique emails and 6,800 phone numbers, along with 3,500 password hashes (using bcrypt encryption) and 1,600 active session tokens, which could allow unauthorized access if not revoked.
This attack follows ZeroBytes’ previous breach of French tax services in August, raising concerns about the security of interconnected government systems. The stolen data is reportedly being sold online, increasing the risk of phishing scams targeting property owners and government-linked accounts. While the full scope of the breach remains uncertain, the incident underscores ongoing vulnerabilities in France’s digital infrastructure.
French Ministry of Economy and Finance cybersecurity rating report: https://www.rankiteo.com/company/french-ministry-of-economy-and-finance
Zéro Logement Vacant cybersecurity rating report: https://www.rankiteo.com/company/zero-logement-vacant
"id": "FREZER1788179084",
"linkid": "french-ministry-of-economy-and-finance, zero-logement-vacant",
"type": "Breach",
"date": "8/2026",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'industry': 'Housing and Property Management',
'location': 'France',
'name': 'Zéro logement vacant',
'type': 'Government Platform'}],
'data_breach': {'data_encryption': 'bcrypt (for password hashes)',
'data_exfiltration': True,
'number_of_records_exposed': '149 million',
'personally_identifiable_information': ['Emails',
'Phone numbers',
'Ownership records',
'Tax authority '
'records'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Ownership records',
'Tax authority records',
'Account details',
'Emails',
'Phone numbers',
'Password hashes',
'Active session tokens']},
'date_detected': 'Sunday afternoon',
'description': 'In another major cybersecurity incident targeting French '
'government systems this summer, the hacking group ZeroBytes '
"claims to have breached the 'Zéro logement vacant' platform, "
'a housing website used by local authorities to manage vacant '
'properties. The group announced the attack on a cybercriminal '
'forum, alleging they exfiltrated 149 million records though '
'the exact number of affected individuals remains unclear due '
'to potential data duplication.',
'impact': {'brand_reputation_impact': 'Ongoing vulnerabilities in France’s '
'digital infrastructure',
'data_compromised': '149 million records',
'identity_theft_risk': 'High',
'operational_impact': 'Platform taken offline',
'systems_affected': 'Zéro logement vacant platform'},
'initial_access_broker': {'data_sold_on_dark_web': True},
'motivation': 'Data Exfiltration and Sale',
'ransomware': {'data_exfiltration': True},
'references': [{'source': 'FrenchBreaches'}],
'response': {'containment_measures': 'Platform taken offline'},
'threat_actor': 'ZeroBytes',
'title': 'French Government Housing Platform Hit in Latest Cyberattack by '
'ZeroBytes Group',
'type': 'Data Breach'}