LIVE: New phishing campaigns targeting mobile users —View latest threats →

Back to Threats
Critical💾 Data BreachNEW

FICOBA Breach — 1.2M French Bank Account Records Exposed

Attackers accessed sensitive data on 1.2 million accounts in FICOBA, France's national registry of bank accounts — a goldmine for identity theft, fraud, and targeted scams.

Published: 28 June 2026

What Is This Threat?

In June 2026, attackers accessed sensitive data on 1.2 million accounts held in FICOBA (Fichier national des comptes bancaires et assimilés) — France's national registry of bank and similar accounts. FICOBA records who owns which accounts across French banks, making it one of the most sensitive government databases in the country.

Unlike a marketing-list leak, a FICOBA-type breach exposes identity and financial linkage data: names, tax identifiers, and the existence of accounts tied to real people. That combination is exactly what fraudsters need to impersonate victims convincingly.

Why FICOBA Data Is So Dangerous

FICOBA does not store balances or passwords, but the linkage it provides is extremely valuable to criminals:

  • Confirms a person's real identity and account relationships
  • Enables highly convincing impersonation of banks and tax authorities
  • Lets scammers reference genuine details to defeat a victim's suspicion
  • Fuels identity theft, loan fraud, and account-opening fraud
  • Real-world consequences in France have included burglaries and targeted fraud following data leaks

    • How Attackers Weaponize a Breach Like This

  • Targeted phishing/vishing: Criminals call or email posing as your bank or the tax office, quoting real details from the leak to sound authentic
  • Account-opening fraud: Stolen identity data is used to open accounts or take out credit in the victim's name
  • Social-engineering pivots: Confirmed account relationships help attackers craft believable stories
  • Resale on criminal markets: Bulk identity data is sold to other fraud rings

    • Why Government Databases Are Prime Targets

    | Factor | Why it attracts attackers |

    |---|---|

    | Data richness | Verified identity + financial linkage in one place |

    | Scale | Millions of records in a single breach |

    | Trust | Data appears authoritative, boosting scam credibility |

    | Longevity | Names and tax IDs cannot be "reset" like a password |

    This breach fits France's 2026 pattern of data-extortion and identity-based attacks against critical national systems, following incidents at France Travail, the Interior Ministry, and the national secure-documents agency.

    Red Flags Checklist (What Victims May See)

  • ❌ Calls or emails from your "bank" or the "tax office" that already know real details about you

  • ❌ Unexpected account-verification or identity-confirmation requests
  • ❌ Letters or alerts about accounts or credit you did not open
  • ❌ Pressure to act urgently or move money to a "safe account"
  • ❌ Notifications of credit checks you did not authorize

    • How to Protect Yourself

    • Treat any unsolicited contact from a bank or tax authority with suspicion — verify by calling the official number yourself
    • Never confirm or provide personal, banking, or tax details in response to an inbound call, SMS, or email
    • Remember that French banks and the tax administration never ask for passwords or full card details by phone or email
    • Monitor your bank statements and credit activity closely, especially after a national data breach
    • Consider placing fraud alerts and checking for accounts opened in your name
    • Enable transaction alerts and strong authentication on your online banking
    • Be extra cautious of 'your account is at risk, move your money' scenarios — this is a classic fraud script

    What to Do If Affected

    1. 1.If contacted by a supposed bank/tax official, hang up and call the institution back on its official published number
    2. 2.Do not move money or share codes because someone claims your account is compromised
    3. 3.Report fraud and scams in France via cybermalveillance.gouv.fr and to your bank immediately
    4. 4.If your identity may be misused, file a police report — it is needed to contest fraudulent accounts
    5. 5.Ask your bank to flag your file and watch for account-opening or credit-application fraud
    6. 6.Change online banking passwords and enable multi-factor authentication
    7. 7.Keep records of all suspicious contacts and transactions for investigators
    #FICOBA#France#data breach#banking#identity theft#2026