It was really hard for me to parse that headline. I'd instead suggest:
Hacker claims exfiltrating data on 680,000 French taxpayers.
Hacker claims exfiltrating data on 680,000 French taxpayers.
I think the title is OK but I'd probably have written e.g
"France's tax authority hacked, 680k taxpayers' data stolen"