French authorities have opened a preliminary investigation into a data breach at Waltio, a cryptocurrency tax reporting platform used by tens of thousands of investors.
This occurred when hackers reportedly got access to sensitive user information and tried to blackmail the company.
The event has brought up new issues regarding the exposure of personal data in the crypto industry, as target fraud and physical attacks against holders are becoming more and more frequent in France.
Authorities Link Waltio Breach to Shiny Hunters’ Extortion Attempt
In a statement released this week, French cybersecurity institutions confirmed that, via its cybercrime division, the Paris Public Prosecutor’s Office had issued an order to the National Cyber Unit of the Gendarmerie to establish the extent of the breach and identify exposed users.
Officials advised that users whose information might have been stolen should be wary of scammers who claim to be genuine service providers or other officials and force them to give up their digital assets using the stolen information.
The law enforcement agencies reported that some more recent fraudsters posed as crypto businesses, bank anti-fraud units, or even law enforcement officers and magistrates.
French newspaper Le Parisien stated that the attack at Waltio was associated with a ransom demand by a hacking organization called Shiny Hunters.
The group purportedly had obtained personal information of approximately 50,000 Waltio users, most of whom reside in France, and said it had samples of the stolen information as proof.
Waltio later filed a complaint of attempted extortion and unauthorized access to the automated data system.
Waltio said its initial internal assessment showed that the attackers accessed tax reports for the 2024 period. These documents included users’ email addresses, information on crypto profits or losses, and asset balances at the end of the year.
The company stated that banking details, administrative records, and tax identification data were not affected and that its core infrastructure was not compromised.
Waltio added that its services remain operational and that client funds are not at risk.
France Tightens Oversight After Crypto Data Breach Amid Rise in Kidnapping Cases
Waltio was founded in France and is headquartered in Clermont-Ferrand. It serves roughly 150,000 users and focuses on simplifying crypto tax compliance for European investors, particularly in France, Spain, and Belgium.
The platform aggregates transaction data from more than 700 exchanges, wallets, and blockchains to calculate capital gains, losses, and staking income, and generates tax-compliant reports for local filings.
The investigation comes amid heightened scrutiny of crypto-related data leaks in France.
In the last year, police have attributed a number of home invasions, kidnappings, and attempted kidnappings to the criminals who intended to use the knowledge of the victims having digital assets.
Masked gunmen steal crypto USB in France as prosecutors reveal tax official sold government database access identifying crypto investors to criminal gangs for 800 euros per operation.#Crypto#Attack#Francehttps://t.co/GmfOkwsE6E
Fraud victims have been cautioned to keep evidence, report to the police, and address the data protection authority in France in instances where they feel that their personal data has not been sufficiently safeguarded.
The Waltio incident is not the first case of data exposure in the crypto industry in the past.
TechCrunch obtained a sample of the stolen data, which contained names, email addresses, dates of birth, and the user's approximate geographic location. Under Armour confirmed some sensitive information was taken in the breach.
The Everest ransomware group has claimed responsibility for a major cyberattack targeting McDonald’s India, allegedly exfiltrating 861 GB of sensitive corporate and customer data. The threat actors posted breach details on their dark web leak site on January 20, 2026, threatening public release if McDonald’s fails to respond within their specified deadline. Scope of Alleged […]
Indian music streaming platform Raaga has become the latest victim of a significant cybersecurity incident after sensitive user data was posted for sale on a popular hacking forum in December 2025. The breach has exposed personal information from over 10 million users, raising serious concerns about account security and the risk of identity theft. The compromised database contains approximately […]
Nicholas Moore, a 24-year-old Tennessee man, pleaded guilty to using stolen credentials of authorized users to hack into computer systems of the Supreme Court, VA, and AmeriCorps, obtaining sensitive information and then posting it online to his Instagram account.
The Canadian Investment Regulatory Organization (CIRO) has officially confirmed a significant data breach affecting approximately 750,000 Canadian investors, stemming from a sophisticated phishing attack initially detected in August 2025. The organization publicly disclosed the incident on January 14, 2026, following a comprehensive forensic investigation spanning over 9,000 hours. CIRO traced the breach to unauthorized access gained through a targeted […]
Kaiser Permanente agreed to a $46M settlement over claims that patient health information was improperly disclosed online. The claims deadline is March 12, 2026.
Kaiser Permanente agreed to a $46M settlement over claims that patient health information was improperly disclosed online. The claims deadline is March 12, 2026.
Digital investment advisor Betterment has confirmed that unauthorized individuals gained access to its internal systems in a recent security breach. The compromise allowed attackers to send fraudulent cryptocurrency-related messages to some of the platform’s customers, raising concerns about data exposure and customer trust. The breach allowed threat actors to access Betterment’s internal infrastructure, which they used to […]