France's FICOBA Registry Breach – 1.2M Bank Accounts

Tech Talks With Kinsoft · Mar 12, 2026 · 15m · transcript

An attacker used the stolen credentials of a French government employee to access the national bank account registry FICOBA for about 16 days (late January–February 2026), exposing data linked to roughly 1.2 million bank accounts — IBANs, names, addresses and in some cases tax identifiers. Account balances were not accessed. FICOBA tracks nearly 300 million accounts for around 80 million people; the episode highlights how stolen-credential access (not hacking) enabled it and the fraud risk when an IBAN is paired with identity data.Concerned about credential theft and insider access to…