TL;DR
- French authorities open a criminal probe into a data breach at crypto tax platform Waltio.
- The government warns of criminals impersonating police to target crypto holders.
- Exposed data includes emails and tax summaries, but no passwords or banking details.
French authorities open a criminal investigation into a data breach at crypto tax platform Waltio, while the government issues formal warnings about physical attacks against cryptocurrency holders. The case links digital exposure with real-world crime and places data security at the center of France’s crypto oversight debate.
The Paris Public Prosecutor, through its cybercrime unit, orders a preliminary probe and assigns the case to France’s National Cyber Unit. Investigators examine the nature of the intrusion, the type of information taken, and the number of users affected. Officials continue the inquiry as of late January, without public findings.
The investigation follows a report from dark web intelligence firm Brinztech, which identifies an offer for sale involving data tied to about 5,000 French crypto holders on December 24, 2025. The listing raises alarms amid a broader rise in fraud schemes linked to personal data exposure.
Waltio acknowledges the incident in a Security Notice dated January 23. The company states that exposed information includes email addresses and summary data from 2024 tax reports. Waltio says passwords, exchange access, wallet addresses, and banking details remain protected. The firm reports no account takeovers or fund losses linked to the breach.
Crypto tax platforms handle sensitive records under international reporting rules. Any lapse amplifies risk beyond screens and ledgers, a point reinforced by parallel crime reports across France.
Government alert highlights direct threats to crypto holders
French authorities issue a specific alert warning about criminals who pose as law enforcement officers and target people linked to the breach. The notice stresses that police never request confidential data by phone and never appear unannounced at homes citing data exposure. Officials urge vigilance against impersonation and pressure tactics.
French media report a kidnapping of a retired couple in Sallanches on January 14 and a foiled abduction attempt in Paris on January 23. Both cases connect to crypto ownership. In a separate incident, France-based hardware wallet maker Ledger reports a data breach earlier in January 2026, adding urgency to official guidance.
Waltio CEO Pierre Morizot files a criminal complaint on January 23 for attempted extortion and unauthorized system access. The company describes a complex attack and confirms active cooperation with investigators. Waltio also notifies CNIL, France’s data protection authority, as required by law.
A review of the timeline shows a clear gap between discovery and response. Brinztech flags the alleged database sale on December 24. Waltio reports receiving an extortion attempt on January 21, 2026, nearly a month later. The firm says the extortion message reveals the breach, not internal monitoring of illicit marketplaces.
As a precaution, Waltio advises users to check the security code displayed at the bottom of official emails and compare it with the code shown inside account profiles. The episode underscores a hard fact: crypto tax services store highly sensitive information, and breaches can trigger both financial harm and personal danger.
