ACCORDING to France’s Ministry of Economy, a breach discovered on 19 February 2026 disclosed information on 1.2 million bank accounts after unauthorized access to the national bank account registry FICOBA. Investigators found that a threat actor stole credentials belonging to an official and used them to access the database storing information on all bank accounts opened in France.
The breach occurred in late January and affected accounts including IBANs, account holder names, addresses, and in some cases tax identifiers. The attacker’s access has been terminated and those impacted are being notified, with officials saying the attacker would not have been able to conduct banking operations or view account balances. Nevertheless, individuals have been warned of potential scams and phishing attempts as a precaution.