1.2M Bank Accounts Exposed in French National Bank Account Registry Breach

"The French national bank account registry, Fichier National des Comptes Bancaires et Assimilés (FICOBA), experienced a breach late January 2026. According to a press release from the institution, 1.2 million accounts may have been exposed. The threat actor accessed this information by stealing credentials associated with an official, leveraging them to gain entry to a part of the database containing all bank accounts opened within French banking establishments."

"Potentially compromised data may include: Bank account identity cards International Bank Account Numbers (IBANs) Account holder identity information (such as address and tax identifier, in some instances) While the breached database exposed 1.2 million accounts, it is currently unknown how many had data accessed and/or extracted. Once the breach was discovered, measures were taken to restrict access and stop the attack. The organization has stated that affected users will receive individual notifications in the coming days. Communication has been established with banking institutions to promote awareness and vigilance."

Late January 2026, France's national bank account registry Fichier National des Comptes Bancaires et Assimilés (FICOBA) experienced a breach that may have exposed 1.2 million accounts. The threat actor stole credentials associated with an official and used them to access a portion of the database containing bank accounts opened within French banking establishments. Potentially compromised data include bank account identity cards, International Bank Account Numbers (IBANs), and account holder identity information such as addresses and tax identifiers in some instances. It remains unknown how many accounts had data accessed or extracted. Access was restricted, the attack halted, and affected users will receive notifications while banks were alerted to remain vigilant.

Read at Securitymagazine