French Authorities Probe Waltio Data Breach as Hackers Expose User Information

French authorities have launched a preliminary investigation into a data breach involving Waltio, a cryptocurrency tax reporting platform, after concerns emerged that hackers may have compromised users’ personal information.

In a notice issued Thursday, French cybersecurity authorities said the Paris Public Prosecutor’s Office and the National Cyber Unit are actively examining what data hackers stole and which Waltio users the breach affected. Officials warned that criminals could target exposed users by posing as security professionals to trick them into handing over their digital assets.

The warning followed a report from French newspaper Le Parisien, which said a hacker group called Shiny Hunters claimed responsibility for the attack and demanded a ransom from Waltio. According to the report, the hackers accessed personal data from about 50,000 users, most of them based in France.

France Probes Waltio Data Breach as “Wrench Attack” Risks Rise

French authorities warned that a recent data leak could put crypto users in danger. As a result, exposed names, home addresses, and details about crypto holdings have made people easy targets for criminals. In response, attackers often contact victims or their family members directly and use threats to force the transfer of digital assets. This practice, commonly known as a “wrench attack,” relies on physical intimidation rather than hacking.

Meanwhile, officials confirmed that these attacks have already occurred in France and cautioned that affected Waltio users and their relatives could face the same risks. Overall, the warning underscores growing safety concerns as criminals increasingly focus on known crypto holders.

At the same time, the investigation comes as France tightens oversight of the crypto industry under the EU’s Markets in Crypto-Assets Regulation (MiCA). Under these rules, crypto companies must meet stricter licensing and transparency standards. Consequently, French regulators have ordered non-compliant firms to either apply for authorization or shut down their operations, with the compliance deadline set for June 30.

Related Articles: