Massive Data Breach Exposes Millions of French Bank Account Details
A significant data breach has compromised the personal and banking information of approximately 1.2 million French account holders. The incident, revealed on Wednesday, February 18, 2026, involved unauthorized access to the Fichier national des comptes bancaires (Ficoba), the national database of bank accounts.
How Did the Breach Occur?
According to the Ministry of the Economy, an “actor malveillant” – a malicious actor – gained access by usurping the credentials of a government official with authorized access to the system. The compromised data includes IBANs (International Bank Account Numbers), names, addresses, and, in some cases, taxpayer identification numbers. Investigations are ongoing, but the method highlights vulnerabilities related to password security and authentication protocols within the ministry.
What Data Was Compromised – and What Wasn’t?
Although the breach is substantial, authorities have clarified that account balances and transaction histories were not accessed. The DGFiP (Direction Générale des Finances Publiques) confirmed that Ficoba does not store this type of financial information. However, the exposed data – particularly IBANs – can still be exploited for fraudulent activities.
Potential Risks for Affected Individuals
The French Banking Federation (FBF) warns that while the stolen data isn’t sufficient for direct fund transfers, it can be used for various scams. Fraudsters could potentially use IBANs to establish fraudulent subscriptions or attempt unauthorized direct debits. The FBF advises account holders to regularly monitor their accounts for any suspicious activity, especially those whose data was compromised.
Specifically, the FBF notes that fraudsters can exploit IBANs by registering as payment initiators and falsifying direct debit mandates, potentially diverting funds. They can also use stolen IBANs to subscribe to services and charge them to the account holder.
Immediate Actions Taken by Authorities
Upon detection of the breach, the Ministry of the Economy implemented immediate restrictions to access Ficoba, aiming to halt the attack and limit the extent of the data compromised. Function is underway to restore the service with enhanced security measures. A formal complaint has been filed and the incident has been reported to the Commission nationale de l’informatique et des libertés (Cnil), the French data protection authority.
What Can Individuals Do to Protect Themselves?
The FBF recommends several precautionary measures:
- Regularly review your bank account statements.
- Update the list of authorized and prohibited creditors in your online banking portal.
- Promptly dispute any unauthorized direct debits.
- Never share your banking credentials (codes, passwords) with anyone, regardless of their claims.
The DGFiP advises individuals to retain any evidence of suspicious activity.
The Broader Context of Cyberattacks in France
This incident follows a series of cyberattacks targeting French institutions, including the Ministry of the Interior in late 2025. This highlights a growing trend of cyber threats facing both public and private sectors in France, with reported fraud losses exceeding €1.2 billion annually.
FAQ
Q: Will I be contacted if my account was affected?
A: Yes, individuals whose data was compromised will receive a direct notification from the Ministry of the Economy in the coming days.
Q: Can fraudsters access my money with just my IBAN?
A: No, account balances were not compromised. However, your IBAN can be used for fraudulent subscriptions or attempts at unauthorized direct debits.
Q: What is Ficoba?
A: Ficoba is the national database of bank accounts in France, containing information about accounts held in French financial institutions.
Q: What should I do if I suspect fraudulent activity?
A: Immediately contact your bank and dispute any unauthorized transactions. Also, report the incident to the authorities.
Did you recognize? The Ficoba database contains approximately 300 million accounts in total.
Pro Tip: Enable two-factor authentication on all your online banking and financial accounts for an extra layer of security.
Stay informed about cybersecurity threats and best practices. Explore additional resources on data protection and fraud prevention from the Commission nationale de l’informatique et des libertés (Cnil).
Have you experienced any suspicious activity on your bank account? Share your thoughts and concerns in the comments below.
Keep reading