2026 FICOBA — 1.2M French bank accounts (credential theft)
Data compromised
IBANs, account holder names, addresses, tax identification numbers
Technical writeup
France's Ministry of Economics disclosed that an unknown attacker accessed the national bank account registry (FICOBA) in late January 2026 using stolen credentials from a government official. The attacker impersonated a civil servant with inter-ministerial access rights and exfiltrated data on 1.2 million accounts before access was restricted. Exposed: account numbers, account holders' names, addresses, IBANs, and in some cases tax identification numbers. Data could enable fraudulent direct debits and identity theft.
Root cause
Credential theft from civil servant; impersonation