French Bank Data Breach: 1.2 Million Accounts Affected

A significant data breach has impacted the French national bank account registry, FICOBA, exposing the data of approximately 1.2 million accounts. The breach, discovered in February 2026, raises concerns about potential fraud and identity theft for those affected.

What Happened?

The Direction Générale des Finances Publiques (DGFiP), the French tax authority responsible for managing FICOBA, identified unauthorized access to the system. According to the DGFiP, an actor gained access by using the credentials of a public official with authorized access for inter-ministerial data exchange . This allowed them to consult a portion of the FICOBA file, which contains sensitive banking information.

FICOBA is a centralized registry of bank accounts in France operated by the DGFiP . The compromised data includes bank account details (RIB/IBAN), the account holder’s identity, address, and, in some cases, their tax identification number .

The DGFiP stated that the attack was stopped quickly, and measures were implemented to limit the amount of data accessed and extracted .

What Information Was Compromised?

The data breach involved the following types of information:

• RIB (Relevé d’Identifiant Bancaire) / IBAN (International Bank Account Number)
• Account holder’s name
• Account holder’s address
• Tax identification number (in some cases)

Importantly, the DGFiP confirmed that bank account balances and the ability to conduct transactions were not compromised .

What Should You Do?

The DGFiP has issued guidance to individuals potentially affected by the breach. Even as the risk of direct financial loss is limited, vigilance is crucial. The DGFiP recommends the following three precautions :

1. Be cautious of phishing attempts: Be wary of any unsolicited emails or phone calls requesting personal or banking information.
2. Monitor your bank accounts: Regularly check your account statements for any unauthorized activity.
3. Report any suspicious activity: If you notice anything unusual, immediately contact your bank and the police.

Further Information

For more information, you can consult the following resources:

• DGFiP Official Statement
• MoneyVox Report
• CCM Report
• BleepingComputer Report