The French executive is under intense scrutiny as it grapples with two major crises that have exposed significant gaps in its preparedness. Prime Minister Sébastien Lecornu cut short his summer break to address both a devastating wildfire situation and a massive cyberattack on the national tax authority, but the response has done little to quell growing criticism from lawmakers across the political spectrum.
Tax Data Breach Exposes Systemic Vulnerabilities
The French tax administration confirmed on Friday, August 14, that it had suffered a significant intrusion into its systems. Approximately 700,000 individuals and businesses were affected by the breach, with stolen data including names, family quotient information, reference tax income, and withholding tax rates. Amélie Verdier, director general of public finances, detailed the scope of the incident, which experts have described as unprecedented in its scale.
The breach has reignited a fierce debate about the security of state information systems, particularly following several previous attacks targeting public institutions. Critics argue that the incident highlights not only technical vulnerabilities but also a troubling pattern of political neglect on critical digital infrastructure.
Stalled Cybersecurity Legislation Draws Sharp Criticism
At the heart of the controversy is a dedicated cybersecurity bill that has languished in parliament since March 2025. The proposed legislation, titled “resilience of critical infrastructure and strengthening of cybersecurity,” was initially adopted by the Senate but has since stalled in the National Assembly. Lawmakers from multiple parties are now demanding immediate action.
Socialist MP Hervé Saulignac has emerged as a leading voice in the criticism, describing the government’s approach as “irresponsible wait-and-see behavior.” He argued that the breach was fundamentally an “opportunity operation for a hacker,” enabled by what he called “organizational and political fragility.”
“The starting point is simply a theft of identifiers,” Saulignac told HuffPost. “We are entitled to wonder whether the government’s inaction in protecting itself constituted a form of provocation for those who engage in these hacks.”
European Deadlines Missed, Security Measures Delayed
The stalled legislation was designed to transpose three European directives into French law, with a deadline of October 17, 2024. France is now among only seven EU member states that have failed to comply, despite repeated warnings from cybersecurity experts and parliamentarians.
According to Saulignac, the transposition would have made mandatory several critical security measures, including multi-factor authentication, access controls, and risk governance protocols. These measures, he argued, “would have reduced the probability that a theft of identifiers would give access to fiscal and cadastral data.”
The MP expressed particular astonishment that the hacker was apparently able to use a tool specific to the tax administration to navigate through sensitive data. “It’s staggering,” he said, emphasizing that the cybersecurity bill “would have at least been dissuasive, and would in any case have considerably complicated the task of the pirates.”
Political Priorities Questioned Amid Multiple Crises
The criticism extends beyond the cybersecurity breach to broader questions about the government’s legislative priorities. Saulignac pointedly noted that the executive chose to “entertain the French with the prohibition of social networks for teenagers or with minor but shaky texts” rather than advance essential security legislation.
“The cybersecurity of public money has no impact on Macron’s popularity curve,” the socialist MP concluded, suggesting that political calculations have overshadowed genuine security concerns.
Similar criticisms have emerged regarding the government’s handling of wildfire protection. The executive waited until August 13, amid threats of a firefighters’ strike, to clarify the timeline for its civil security reform—a measure that had been in preparation since spring 2024. That legislation is now scheduled for parliamentary debate in the autumn, a delay that many consider dangerously late given the severity of recent fire seasons.
Growing Pressure for Immediate Action
The convergence of these crises has placed Prime Minister Lecornu in a difficult position. His visit to fire-ravaged areas in Gironde was met with significant public hostility, and the interministerial cell he convened on the tax breach must now address both the immediate security response and the broader political fallout.
As the government scrambles to respond, the question remains whether these incidents will finally force a reassessment of priorities—or whether critical security measures will continue to be postponed in favor of more politically expedient legislation.
