France
FRA
DGFiP: Unauthorized access to FICOBA via stolen credentials exposed ~1.2M bank accounts
France’s Ministry of the Economy reported that from late January until 13 February 2026 an attacker using compromised credentials of an official with access to the FICOBA national bank accounts file consulted data including IBAN/RIB and account holder identity/address. Access was revoked, the CNIL notified, and a complaint filed. No operational disruption was stated.
32
Estimated severity
32 / 100
84
Source reliability
84 / 100
Approximate Date
13/02/2026
Targeted Company
DIRECTION GENERALE DES FINANCES PUBLIQUES
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
No information
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
France
Affected countries
France
Impacted regions
France · France
Operational Impact
Duration
No information
Financial impact (USD M)
No information
Impact types
No information
Affected sectors
Government & Public Administration
Affected departments
No information
Attack Profile
Attack types
Use of stolen credentialsUnauthorized accessData breach
Attributed threat actors
No information
Sources
Incident Sources
presse.economie.gouv.frhttps://presse.economie.gouv.fr/acces-illegitimes-au-fichier-national-des-comptes-bancaires-ficoba/questions.assemblee-nationale.frhttps://questions.assemblee-nationale.fr/q17/17-13230QE.htmaa.com.trhttps://www.aa.com.tr/en/europe/france-reports-data-breach-affecting-12-million-bank-accounts/3834116securitymagazine.comhttps://www.securitymagazine.com/articles/102133-12m-bank-accounts-exposed-in-french-national-bank-account-registry-breach